A victim post tied to Thegentlemen raises a familiar but unresolved question in ransomware cases: what is confirmed, and what is only being claimed?