Without robust and easily scaled infrastructure in place ahead of time, an organic DDOS is one of the most difficult situations to mitigate. Not much can be done in terms of traffic shaping, rate limiting, or bot detection.
1999.
To be fair, I don't think they crashed; I saw a "sorry too much traffic try later" type message. Still amuses me.
... if you're willing to trust another company with your data.