Colonial Pipeline confirms it paid $4.4m ransom to hacker gang after attack