A new victim listing tied to United Finance Limited shows how ransomware intelligence can raise alarms before any breach is publicly confirmed.