The Florida Agency of Healthcare Administration has notified 30,000 Medicaid patients that their data may have been breached after an employee fell for a phishing email in November. Although no other systems or email accounts were affected, hackers may have accessed patient names, ID numbers, dates of birth, addresses, diagnoses, medical conditions, and Social Security numbers. Steps have been taken to prevent further access, and affected patients are being offered free credit monitoring.

Popular NPM Package ‘ctrl/tinycolor’ with 2M Weekly Downloads and 40+ Others Compromised in Supply Chain Attack
The NPM ecosystem is under attack once again, with a sophisticated supply chain compromise targeting the widely-used @ctrl/tinycolor package and over 40 other JavaScript packages.