The lies are still up on their blog:

"At no time was customer data "leaked" between accounts. This would require that a user not scrub their volume after destroying their server; in this instance data would be recoverable and should be considered not sensitive."

For a long time, if you deleted a DO virtual machine, it would not delete your data by default, so that the next customer would receive it on the block device to be recovered.

When I pointed this out to them, after it caused me a few thousand USD in credits I had to issue to my customer (as I remediated DO leaking my customer's data (through my use of the service)), they maintained "there's no leak because we give you a checkbox".

There is absolutely no circumstance, checkbox or no, in which delivering my data on disk to another customer is okay.

After I made a huge stink about it, it ended up at the top of HN, and they switched to a sane default (scrubbing disks after a user deletes a VM). It shouldn't even be an option, but there it is.

Despite all of this, though, they continued to lie about the root cause: they were careless with their customers' data and trust.

It looks like they've hired some people who aren't dicks and have since updated the blog post with sanity. Nice to see, but still: be mindful of how these people conduct themselves.