A leak-site listing can signal extortion pressure, yet it does not by itself prove breach scope, data theft, or encryption.