A public leak-site listing can look like proof, but in ransomware work it is often only the first signal - not the final answer.
A ransomware-branded post names parkviewtaipei.com and a long incident hash, yet the public record does not show what was breached, if anything at all.