The U.S insurance giant CNA Financial reportedly paid a $40 million ransom to restore access to its files following a ransomware attack.