A ransomware claim tied to an HR services firm shows how extortion crews use names, hashes, and pressure tactics to force attention before any compromise is publicly confirmed.