Medibank private says a group holding it to ransom claims to have stolen 200 gigabytes of personal data including names, Medicare numbers and phone numbers. The company says a small sample of the data provided to it by the criminal also includes information on where customers received medical services and codes related to their diagnosis.