A Genesis-branded victim post naming Dunagan Associates shows how extortion claims can create risk long before any breach is publicly confirmed.