Up to four million current Medibank customers may have had their data stolen, along with countless past customers. Distressingly, the data of children linked to their parents' accounts may have also been impacted.