A Minneapolis travel company just paid hackers $4.5 million worth of Bitcoin in response to a ransomware attack that compromised sensitive documents.