Medibank says all customers' personal data compromised by cyber attack (abc.net.au)

I am a member. They cannot tell me in my profile what primary 100pts ID was used to bootstrap my account.

Without this information how can I meaningfully determine my exposure to risk? If it's an expired passport or driver's licence I won't seek reissuance. If it's current I might.

Stupid UX