Confidential information released after school district refused to pay hackers’ ransom demand, report says