A ransomware listing names a domain and a hash, yet the underlying incident remains unverified and the operational impact is not established.