A public ransomware listing can be a pressure tactic long before any breach is confirmed, and that distinction matters for both security teams and everyone reading the news.