A victim listing tied to a municipal domain and a claimed set of 162 emails shows how even small public bodies can become useful pressure points in extortion-driven crime.