Medibank has described the release of more customer data on the dark web as "deplorable" and "a weaponisation of people's private information".
On the dark web post additional text was added, stating: "Society ask us about ransom, it's a 10 millions (sic) usd. We can make discount 9.7m 1$=1 customer."
At current rates, $US9.7 million is worth $15.07 million.
The alleged hacker, also posted: "Medibanks (sic) CEO stated, that ransom amount is 'irrelevant'. We want to inform the customers, that He refuses to pay for yours data more, like 1 USD per person. So, probably customers data and extra efforts don't cost that."
Following the release of 200 users' personal health data yesterday, the hacker has today posted an additional file of sensitive information allegedly obtained in the hack.
9news.com.au understands the diagnostic code listed in the file against the names of over 300 Australian men and women refers to an admission for "supervision of high-risk pregnancy, unspecified, first trimester".
Federal government condemns hackers over data breach
Home Affairs Minister Clare O'Neil issued a stark warning during parliament's Question Time to the cybercriminals behind the Medibank attack who allegedly released more customer data onto the dark web.
"I want the scumbags behind this to know the smartest and toughest people in this country are coming after you," she said.
O'Neil apologised to the customers whose private health information was allegedly compromised.
"I want to say to the women whose private health information has been compromised overnight as the minister for cybersecurity but more importantly, as a woman, this should not have happened," she said.
"As a government, we stand with you. You are entitled to keep your health information private.
"What has occurred here is morally reprehensible and it is criminal."
'It is an attack on the most vulnerable members of our community'
Meanwhile, Medibank CEO David Koczkar earlier called the data release on the dark web "disgraceful" and once again apologised to customers.
"We take the responsibility to secure our customer data seriously and we again unreservedly apologise to our customers," he said.
"We remain committed to fully and transparently communicating with customers and we will be contacting customers whose data has been released on the dark web.
"The weaponisation of people's private information in an effort to extort payment is malicious, and it is an attack on the most vulnerable members of our community.
"These are real people behind this data and the misuse of their data is deplorable and may discourage them from seeking medical care."
With so much information already leaked, there is a high risk of scams and individual ransom demands to come for the 500 or so Australians whose personal data has already been published.
Those customers should be on high alert for scammers.
As a reminder, Medibank said again today it would never contact customers to ask for passwords or sensitive information.
Medibank is yet to contact the 500,000 customers who have had health data stolen to specifically advise them that they are among the group for whom the hacker has more than just contact information.
Former tennis champion believes he may be a victim of the hack
Former tennis champion Todd Woodbridge has said he believes he may be one of them and has been targeted by scammers following the hack.
Woodbridge, a Medibank customer, said he suffered a minor heart attack last month and recently received a phone call from scammers who tried to get him to pay a "hospital bill".
They knew the hospital he had stayed at along with other personal information, but Woodbridge, who had already paid the bill, said he didn't hand over any account information.