California healthcare breach data

The two counts above answer different questions and are not added together: one says the breached organization is located in California, the other says a notice about the event appears through California. Neither states where an incident physically happened, which these sources do not establish. Reported affected is an event total, not a count of California residents: unless a source scopes its figure to one state, it covers everyone the breach affected anywhere. For the same reason state figures do not sum to the national total — one breach reported through several jurisdictions is one event appearing under each of them. How these numbers are calculated.