A ransomware leak-site post naming shelby.com.mx may be a pressure tactic, not proof of compromise, and that distinction matters for manufacturers.