MGM to pay $45m to data breach and ransomware victims