They just accidentally tested their redundancy and found it wanting. It'll be interesting to see how they rearchitect to prevent this failure mode in the future.