A claim tied to a French commune’s web domain shows how ransomware crews use public naming and leak-site pressure even before any compromise is confirmed.