A victim post names the public finance technology institution CTIF, but the alleged stolen-data offer remains unverified.