A claimed attack tied to a wholesaler’s public domain is a reminder that modern extortion can hinge on access, not encryption, and that the real damage may begin before any files are locked.