Though the Chicago-area hospital did not pay a ransom, a host of sensitive medical information is now at risk.