A claimed hit on the t-online.de news portal shows how extortion crews can weaponize attention long before any breach is confirmed.