Bupa (large Aussie health insurer similar to Medibank):
“please be aware that Bupa will never: ask you to provide information such as your account details, password, banking information or myBupa login details on an unsolicited basis or unsecure channel such as email”

Also Bupa: