A named ransomware claim tied to Carolina-Agri-Power is a reminder that even an unverified leak-post can trigger real operational and reputational pressure.