A Museum Name, a Ransom Note, and a Claim That Still Needs Proof

A ransomware post naming natmus.dk points to a real public institution, but the technical facts remain thin: what is confirmed is a claim, not a proven breach.