Something must be going over your head (hence the downvotes that you deserve)... You understand they are not paying the hackers, right? They paid a reputable InfoSec company for urgent DDoS protection. That's a perfectly legit use case.