A new ransomware-extortion entry names Surtifamiliar and mentions employee passports, yet the public record still leaves the scope and impact unresolved.