Potential health insurance customers who requested quotes with ahm have been caught up in the data breach affecting millions of Medibank customers.
Health insurance brand ahm is part of Medibank, which was hacked in October 2022 with the personal information of up to 9.7 million customers released onto the dark web.
The ABC has seen an email sent late last week to a potential ahm customer who had obtained a quote, informing them their data had been stolen and posted by hackers online.
The breached data of those who had requested quotes included full names, dates of birth, emails, and where provided to ahm, genders, addresses and phone numbers.
In the email, ahm apologised, saying the company "recognised the distress that this may cause".
Maurice Blackburn Lawyers, Bannister Law Class Actions and Centennial Lawyers have teamed up to start a class action against Medibank over the data breach.
Private Healthcare Australia chief executive Rachel David said the length of time organisations kept information from people who obtained quotes varied.
"I do think a couple of years sounds a little excessive," she said.
"I think in light of the issues that have occurred with the data breach, this is one of the things that health funds will be reviewing."
Medibank did not answer the ABC's questions about how long it stored personal information relating to quotes nor how many people who had requested quotes had their data stolen.
A Medibank spokesperson said the company retained information relating to quotes for "a period of time as prospective customers usually shop around and often end up coming back to take up a policy with us".
"Rather than customers needing to enter all their information again, their quote remains in the system for a period of time.
"We sincerely apologise to all customers who have been impacted by the cybercrime."
The spokesperson said Medibank had created a Cyber Response Support Package for all customers, including those who obtained quotes, which included metal health, identity protection and financial hardship measures.
