This happened to us (Weebly) years ago when we had godaddy as our registrar. I highly suggest you transfer your domain to someone competent like Safenames or MarkMonitor.
Although the report states "2.4. There are no known reports of end-user visible error conditions during, and as a result of, this attack.", it's not entirely accurate. I personally experienced issues with name resolution shortly after the attack started, and had no idea what the cause was until afterward. If I recall correctly, my name resolution was handled by Qwest, as they were the T1 transit provider I was using at the time.
It ended in September 2006. It was cool because you could see the other person's IP, which was useful because you could then use your Google analytics to see which hot girls were clicking the links from your facebook profile to your home page.
We currently have the ability to upload your own theme and customize existing themes, in development. Shoot me an email, chris (at) weebly.com, and I'll give you access. Otherwise, this feature should be live early next week =)
I agree. Simply disabling an account that was used at more than one ATM within a certain timeframe, based on geographic area, would have limited the damage. Similar to how cell phone cloning is detectable.