A ransomware-themed post named a healthcare site and attached a long incident string, but the publicly visible evidence supports only an extortion claim - not a confirmed breach.