As of May 30, businesses that earn more than $3 million a year will need to report paying a ransom to hackers. Here’s what ...