BPAS must pay £200,000 after a hacker threatened to publish thousands of names of people who sought advice on abortion, pregnancy and contraception