A significant data breach has been discovered in New York City's municipal healthcare system, affecting approximately 1.8 million patients. The incident, which occurred earlier this year, involved an unnamed third-party vendor and resulted in the compromise of sensitive information, including biometric data such as fingerprints. The breach is particularly concerning due to the sensitive nature of the stolen data, which could be used for identity theft or other malicious purposes. The healthcare system is currently notifying affected patients of the incident1. The fact that a third-party vendor was involved highlights the importance of thoroughly vetting and monitoring vendors to prevent such breaches. This incident serves as a reminder that healthcare organizations must prioritize cybersecurity to protect patient data, so what matters most to practitioners is the need to re-examine their own vendor relationships and security protocols to prevent similar breaches.