MGM didn't pay up after hackers broke into its system and stole customer data