Medibank has confirmed the personal data and significant amounts of health claims data of all of its customers have been accessed by cyber criminals.
The private health insurer said on Tuesday more than four million of its customers had been caught up in the cyber attack.
Speaking to Virginia Trioli on Mornings, tech reporter at the Guardian Josh Taylor said there were questions Medibank needed to address.
"Why wasn't there additional layers of security in terms of making sure a person's account had two factor authentication?
"We need to find out more about how this was allowed to occur and what sort of protections they're putting in place."