Lawyers will chase compensation for thousands of Medibank customers in what they describe as a potential test of privacy laws around health records.

In October last year, cybercriminals threatened to publish Medibank customers’ claims data unless the health insurer paid $15.6 million — one US dollar for each customer hacked. 

When Medibank did not pay up, the hackers followed through, publishing a list of well-known names linked to insurance claims for addiction treatment, mental health treatment or terminations.

Maurice Blackburn principal lawyer Andrew Watson said that not every medical business that fell victim to hacking would necessarily face the prospect of legal action.