Who was to blame for what looked like a DDoS attack on the AA? That would be … the AA

AA members not unreasonably complied when they received an email warning them to change their passwords … but the AA’s servers couldn’t cope