A ransomware name, a domain, and a hash-like string are enough to spark concern; they are not enough to prove a breach.