Medical Vendor Paid Ransom After Cyberattack Locked Patient Data, Report Reveals