A judge has ordered private health insurer Medibank to pay $5 million in penalties for rejecting the claims of hundreds of members who were entitled to coverage for critical medical procedures, including spinal surgery.