>Our current expectation is that AO3 will be down for a minimum of two weeks; however, it could take up to four weeks.

That seems crazy to me. I've been part of orgs that have had stuff like this happen and they've been mostly back within 24 hours. I'm curious if they had no plan for this sort of thing and if they're unwilling to bring in professional companies that help analyze and cleanup these sorts of issues.