Medibank failing the public and allowing leak of data