A reported Akira victim entry shows how ransomware extortion now targets the concentrated identity and financial records that professional firms hold for clients.