UnitedHealth Group says it paid a ransom to protect patient data from a cyberattack