Sarah Luke was one of the people whose data was breached in the Medibank hack last year, as well as in a PayPal hack a month later. She didn’t initially think too much of it — until a US court charged her with a whole host of crimes and told her she owed two companies almost $2 million in damages.
