NotPetya cyberattack: insurers ordered to cover Merck's losses