Ransom was demanded to unlock files that were 'encrypted' by the attack The demand specifies that payment should be made via bitcoin The attack may have broader implications beyond England's health service