A public ransomware allegation against Carton-Craft-Supply highlights how quickly extortion claims can pressure a business before any breach is confirmed.