Medibank says hacker accessed data of 9.7 million customers, refuses to pay ransom