A victim post naming the UK IT firm is a reminder that extortion campaigns often start with public pressure, while the real technical picture may still be unconfirmed.