Medibank won't pay data hacker ransom


* Hackers sent a sample of stolen customer data to Medibank on October 19, with the health insurer immediately entering an ASX trading halt

* Medibank confirmed the hackers had the names, dates of birth, address, phone numbers and email addresses of its 9.7 million current and former customers, along with the Medicare and passport numbers of some customers

* The hackers demanded a ransom but Medibank said it wouldn't pay any fee, arguing there was no guarantee the data would be destroyed as a result

* Australian Federal Police are investigating, while Medibank is getting support from the Australian Signals Directorate's Australian Cyber Security Centre and the Department of Home Affairs

* Home Affairs Minister Clare O'Neil called the offending a "dog act" because almost 500,000 personal health claims had been accessed

* No credit card or financial data has been accessed