Tesco Bank says it has paid out an estimated £2.5 million to 9,000 customers after it fell victim to a cyber attack at the weekend.