Hackers are holding a California hospital’s network hostage for $3.6 million