A reported ransomware event and a Bitcoin demand pushed a government-facing site into the spotlight, but the technical picture remains only partly confirmed.