Kylie Bishop, head of human resources at Medibank – or to be more accurate, group executive people, spaces and sustainability – is waiting patiently in Melbourne’s Higher Ground cafe when I arrive.

Bishop seems calm, unhurried and patient. Her unfrazzled demeanour is slightly surprising given the big news the previous day when the government announced sanctions against Russian Aleksandr Ermakov for his role in the Medibank data breach, in which the personal information of 9.7 million people was stolen and posted online. Following an investigation by the federal police, it was discovered the hacker had accessed the system using credentials stolen from a third-party IT provider.