To pay or not to pay ransom? Medibank refuses to negotiate with hackers who accessed the personal details of almost 10 million Australians.