Medibank has confirmed all four million of its customers have been caught up in a major data breach.


Professor of Cyber Security Practice ECU, Paul Haskell Dowland told Oly Peterson on Perth Live there needs to be a review into the nature and volume of data collection, and how ID storing requirements can be met safely. 


"With Optus we seen the requirement from the government to retain ID information, passport numbers and drivers license numbers for a prolonged period of time... they have to do it...." he says.


"But wherever you store sensitive, important, valuable data there will be an incentive for criminals to steal it."


The latest stats showed there's some kind of an incident every eight minutes in Australia being reported. 


"We have mandatory breach notifications in Australia, but I am convinced there are quite a lot of attacks never go reported at various levels ."

See omnystudio.com/listener for privacy information.