The company paid $4.4 million the day after the hack was discovered.