A named ransomware group has attached an identifier and a victim domain to MEISA---Sines, but the public record still stops at a claim, not proof of breach.