“Alarming language ('shut down,' 'ransomware,' 'demands') emphasizes threat and urgency without noting successful containment or recovery measures.”