Negligent companies face DDOS liability