If I wanted to attack a site such as this to produce this effect I would DDOS the cache to prevent it from receiving updates from the main server.
Is that connection exposed to the general internet? Is it done through a firewalled internal network at a server farm also used by other sites? A bad guy could have contracted Cloudfire to run his own site and then used that server to fuck with the cache.
I'm speculating wildly.