Is Medibank right to refuse paying ransom to its hackers?

Medibank says they won't pay the ransom to hackers who accessed the personal information of just over 9.5 million current and former customers. Dr Vanessa Teague explains the rationale behind the health insurer's decision and its implications for affected customers.