A $28.7m demand generates a board meeting, a law firm, an insurer and eventually a public record. A $40,000 demand generates a wire transfer.
An affiliate panel records who was attacked because the operation needed to track it. No notification law stands between the event and the row.
A stolen session token arrives after authentication. Multi-factor is not bypassed — it is never consulted.