The details I was expecting are more in the line of what measures they put in place to mitigate the issue, more than "Our mitigation strategy included filtering

The details I was expecting are more in the line of what measures they put in place to mitigate the issue, more than "Our mitigation strategy included filtering through a single provider and working with them to remove bogus traffic." which sounds like "our hosting provider enabled the DDoS mitigation service they've got in place". Again, that's not what I expect from a post-mortem but I guess this is me being a geek and not a Basecamp customer :) Cheers