The way Medibank has handled this breach has been atrocious. Drip feeding information, minimising, misleading etc. My data is in this breach and all I've gott

The way Medibank has handled this breach has been atrocious. Drip feeding information, minimising, misleading etc. My data is in this breach and all I've gotten thus far is the bullshit comms corporate speak emails from their CEO. No personalised notification that my details are out there on the internet, nothing. There ought to be personal criminal penalties placed on company leadership for this kind of ongoing and, and this point, wilful negligence. Otherwise they will never have sufficient incentive to guard against this kind of risk.