A leak-site posting can raise pressure fast, but it does not by itself prove the full intrusion path, data theft, or final impact.