The class action would have to prove that Medibank's cybersecurity was incompetent or negligent, which could be challenging for the plaintiff. Dive also questions whether the government would be happy to allow Australia's largest health insurance provider with 29 per cent market share, to be financially crippled.