A Byron Bay woman is facing a costly legal battle in the United States after hackers used her identity to trade counterfeit sporting goods. Sarah Luke says after accessing her PayPal account, the hackers made a series of fraudulent transactions, leading to lawsuits against her. Ms Luke had been among the many Australians caught up in the Medibank data breach.