A new victim post and a claimed 35 GB dump show how ransomware crews use disclosure threats to force attention before any breach is independently confirmed.