A public-sector domain has been pulled into an extortion narrative, but the technical question is not the claim itself - it is what evidence can prove, disprove, or limit it.
A municipal web domain has appeared in an extortion listing, a reminder that in ransomware cases the first public signal is often accusation, not proof.