I have been thinking about using Digital Ocean (moving from Linode) but I have heard a few stories like this that really make me second guess that decision.
What Digital Ocean did here seems completely reasonable.
I think they're probably inundated with novices who don't do basic securing of their VPSes and experiencing a lot of abuse as a result.
At least some sort of notification should be in place.