Medibank is facing another class action investigation over a massive data breach that left the personal information of almost 10 million customers exposed, just days after criminals began publishing sensitive customer health data.