During the Medibank hack, the health insurer refused to pay a $15m ransom. That led to a cache of sensitive customer ...