Hit by a ransomware attack? Your payment may be deductible