A ransomware claim against Silvestri & Associates Insurance shows how quickly an unverified allegation can become an operational problem for defenders.