The breach at Medibank began with the theft of an employee's credentials. The breach at Medibank, an Australian health insurance provider, started with the theft of the credentials of an employee with high-level access to the organization, according to The Guardian's source.