Medibank's board has faced a grilling from shareholders at its annual general meeting in the wake of a cyber attack that has affected almost 10 million current and former customers. The company is standing by its decision not to pay the hackers a ransom, despite them promising to release more personal health data later this week.