A ransomware post naming segurospiramide.com is a signal worth triaging, but not yet proof of breach.