Education fails closed while other sectors degrade. The fix is not detection — it is an offline copy of the data needed to open safely.
Five names, five sectors, one explanation. A list of five describes the head of a very long distribution.
A newsroom holds source contacts and the record of who spoke to whom. Where that carries risk, it is not a data-protection matter.
Knowing this operation is active tells a defender nothing, because it is active everywhere. Naming it is naming the weather.
One ERP zero-day, 29 named victims across unrelated sectors, nothing encrypted. Theft-and-publication at industrial scale.
By the final phase there was no peer sector to watch, because the target was defined by a product rather than an industry.