Queenslanders will need to provide two unique numbers on their driver's licence to verify their identity to open a bank, internet, phone or utilities account.

Premier Annastacia Palaszczuk says the new "two-factor" verification comes after the Optus data breach in September, which has resulted in thousands of people applying for new licences over the past month.

From Thursday licences won't be acceptable as a form of ID unless people quote the unique card number as well as the licence number.

Optus revealed the cyber attack had potentially exposed the personal data, including the driver's licence numbers, of almost 10 million customers on September 23.

The state government offered to replace the licence numbers of those caught up in the breach, which could be almost 665,000 people, according to its own estimates.

The transport department, which usually processes about 30 licences a week, has received more than 170,000 applications since September 28.

Transport Minister Mark Bailey said the two-factor rules were due to be put in place next year, but had been brought forward.

"This extra security measure will mean the compromised licence number cannot be used for fraudulent activity on its own," he told AAP in a statement.

Mr Bailey said affected Optus customers who were yet to change their licence numbers could still do so for free.

Opposition transport spokesman Steve Minnikin said Queensland had to replace 10 times the number of licences as NSW because the government didn't opt into a state-federal verification program on time.

He said the Queensland government didn't implement the national Document Verification Service changes on September 1.

"Today's too-late announcement by the premier is lip service to Queenslanders whose data has been breached," Mr Minnikin said in a statement.

"As we've seen all too often with this government, they're too slow to act and now Queenslanders suffer the consequences."

© AAP 2022

The Medibank hackers claim they demanded a $US9.7 million ransom not to release stolen customer information, as the health insurer blasted their latest data dump as a "malicious" attack on vulnerable Australians.

In a chilling message posted on the dark web overnight, the ransomware group released sensitive details of customers' medical procedures and said it had demanded $US1 ($A1.60) for each of Medibank's 9.7 million customers.

"Added one more file [name removed]," the post said.

"Society ask us about ransom, it's a 10 millions usd. We can make discount 9.7m 1$=1 customer."

The group began releasing Medibank data on the dark web in the early hours of Wednesday morning under files named "good-list" and "naughty-list".

The first wave included names, birthdates, addresses, email addresses, phone numbers, health claims information, Medicare numbers for Medibank's ahm customers and passport numbers for international student clients.

"The weaponisation of people's private information in an effort to extort payment is malicious, and it is an attack on the most vulnerable members of our community," Medibank CEO David Koczkar said in a statement on Thursday.

"The release of this stolen data on the dark web is disgraceful ... these are real people behind this data and the misuse of their data is deplorable and may discourage them from seeking medical care.

"People whose highly sensitive health information was stolen and posted on the dark web will get the support they need," Australian Information Commissioner and Privacy Commissioner Angelene Falk said.

"These acts are abhorrent. To post Australians' sensitive health information on the dark web is very concerning," she told Nine's Today Show on Thursday.

"Right now, we need to support affected individuals."

Medibank has set up links to mental health services on its website.

Asked what people should do if they were contacted by someone claiming to have that information, federal minister Annika Wells reiterated the government's advice was not to pay ransoms and make a police report.

"You do not pay the ransom," she told Nine.

"You're making the assumption that that is true and what we're saying is that may not necessarily be the case - plenty of scumbags out there are going to try and make the most of this situation."

Opposition cybersecurity spokesman James Paterson said there was no doubt affected Medibank customers will be very distressed.

"Unfortunately ... this is the worst-case scenario," he told ABC Radio, adding that companies need to take hacking threats seriously.

"If after Optus and Medibank they're not taking it seriously, they need their heads read."

Australian Federal Police are ramping up efforts to catch those behind the huge data breach and are co-ordinating with state and territory police to support people at risk of identity fraud.

Operation Guardian, which was set up to tackle the recent Optus hack, is being expanded to investigate the Medibank data theft.

"If members of the community feel they are at imminent risk they should contact triple zero immediately," AFP Assistant Commissioner Cyber Command Justine Gough said.

Medibank has confirmed details of almost 500,000 health claims have been stolen, along with personal information, after the unnamed group hacked into its system weeks ago.

No credit card or banking details were accessed.

© AAP 2022

Ten weeks after being found guilty of murdering his wife Lynette 40 years ago, Christopher Dawson will be back in court to argue over the length of any jail time imposed.

At midday on Thursday in the NSW Supreme Court, Justice Ian Harrison is set to hear submissions from prosecutors and Dawson's legal team about what sentence the convicted murderer should be given.

On August 30, the judge delivered a five-hour long judgment outlining why the now 74-year-old was guilty of killing his wife and disposing of her body.

"I am left in no doubt. I am satisfied beyond reasonable doubt that the only rational inference (is that) Lynette Dawson died on or about 8 January 1982 as a result of conscious or voluntary act committed by Christopher Dawson," Justice Harrison said.

Motives for the killing include the former teacher's obsession with one of his high school students, known as JC, and his desire to be in an unfettered relationship with her.

Mrs Dawson went missing from the couple's Bayview home in Sydney's northern beaches four decades ago. Her body has never been found despite extensive police searches.

Dawson has consistently denied any involvement in his wife's disappearance, claiming she simply up and left her family home and children without a trace.

Justice Harrison rejected this version of events as "ludicrous".

Two days after the judgment, a lawyer for the ex-Newtown Jets rugby league player told the court that his client had already received death threats while at Silverwater prison due to the high profile nature of the case.

The case shot into the public eye largely as a result of The Teacher's Pet podcast by The Australian's Hedley Thomas which garnered millions of views across the globe.

On the day of the guilty verdict, police confirmed the investigation into Mrs Dawson's murder was not over and urged anyone with information to come forward.

Dawson has already filed an appeal of his conviction.

© AAP 2022

British police say a man has been detained after appearing to throw eggs at King Charles III and Camilla, the queen consort, as they walked in the northern England city of York.

The incident happened as the monarch and his wife were entering York through Micklegate Bar, a medieval gateway where monarchs are traditionally welcomed to the city.

Video footage showed several eggs in motion and smashed on the ground. None appeared to hit the royal couple.

Several police officers could be seen grappling with a man at a crowd barrier. Britain's PA news agency reported that he shouted "this country was built on the blood of slaves" as he was being detained.

Charles and Camilla also are due to visit the city's cathedral, York Minster, and unveil a statue of Queen Elizabeth II, who died in September.

© AP 2022