The breach, which saw data posted on the dark web, has raised serious concerns about the company's data protection practices and its compliance with privacy regulations. Potential Penalties The lawsuit could result in hefty penalties for Medibank. The Federal Court has the authority to impose a civil penalty of up to AU$2.22 million ($1.5 million) for each violation of the Privacy Act. If found guilty of multiple violations, Medibank could face significant financial repercussions. Market Reaction Despite the recent 0.8% drop in share price, Medibank's stock has shown resilience throughout the year.