The Russian hacker accused of stealing the medical records of millions of Australians in the Medibank attack once held a legitimate day job in corporate reputation control. By night, he allegedly turned those skills to extortion, hacking a nation from his modest Moscow apartment.

An investigation has uncovered a decade-long trail of Aleksandr Ermakov’s online activity.