A new extortion post names a Saudi healthcare design consultancy, but the available details stop short of proving intrusion, data theft, or downstream impact.