This is a common thing with hacking hospitals... a hospital overseas recently paid around 60,000 in the same situation and their reason was, they needed to keep operating. Patients records were locked up and everything. So I doubt they're hiding anything