A leak-site style allegation against a regional construction association shows how ransomware brands can weaponize uncertainty long before any breach is proven.