A MedusaLocker-linked extortion post naming SGS GmbH shows how a public claim can create real defensive urgency even before any compromise is verified.