Health care giant comes clean about recent hack and paid ransom