A shareholder class action against Medibank has claimed it did not disclose “serious deficiencies” in its cybersecurity measures, including failing to implement security measures such as multi factor authentication, causing investors to buy shares at inflated prices.