**2.3 Data breaches reported to the HHS OCR across the USA**

The HHS unauthorized data release portal provides the number of affected individuals from the cybersecurity events for each self-reported or discovered data release. **Figure 3** [6] shows states across the USA with the most reported individuals, whom are now at risk from the leaking of their patient data. In any given

**Figure 2.** *OCR-covered entities risk sources.*

**Figure 3.** *OCR breached individuals by state.*

**Figure 4.** *OCR-covered entities investigated BAA by state.*

one-year interval, each state may be equally likely to have higher counts depending on the released data size. Further research is needed to determine state likelihood.
