Cyber incidents rarely begin with chaos. No sirens. No flashing lights. Just a quiet alert that something isn’t right. That’s how it started for Alex Loizou, former Chief Information Security Officer at Medibank, on an October evening in 2022. A routine detection. An anomaly that, at first glance, looked like background noise. It wasn’t. Within hours, Australia’s largest private health insurer was confronting one of the most consequential cyber breaches in the nation’s history. An incident that would expose sensitive data, trigger public outrage, and place heavy pressure on the people tasked with defending the organisation. “We didn’t quite understand the significance of what we were seeing,” Loizou ...