Ransomware: What are the legal implications of your business getting hit?