A public extortion post naming Berg Lilly PC shows how ransomware crews turn sensitive legal data into leverage before any breach is independently proven.