Tech columnist John Davidson on the Medibank hack, how it happened, and why Russian criminals may not be the biggest threat to your data.Background reading:

Inside Australia’s most invasive data hack “We will do everything in our power to inflict as much damage as possible to you,” hackers told Medibank last month. This is how the negotiations unfolded.
How to avoid joining Optus and Medibank on the cybersecurity walk of shame We’ve interviewed some of the world’s top cybersecurity experts and asked them one question: how do you dodge the cyberattacker’s bullet?
Medibank mystery: Was a user credential all that was needed for the hack? How does a compromised password let a data thief access the most sensitive of customer data: health records?
What personal data do scammers want from you (and how will they use it)? From credit card details to your email address and date of birth, there’s plenty of personal information that could be used to scam you, if it falls into the wrong hands.
See omnystudio.com/listener for privacy information.