The financial services watchdog is urging Medibank Private to dock executive pay over serious security lapses after the massive breach of personal health data that exposed the health insurer’s entire customer database.

The Australian Prudential Regulation Authority (APRA) also said on Monday it would increase its scrutiny of Medibank and might take further action against the company, pending an external review of the health insurer.