A ransomware post names aphenapharma.com, a hash, and a related company page, yet none of that by itself proves a confirmed intrusion.