Peers and geography

How do organizations like mine compare, and where are breaches reported?

Choose your entity type, state and typical breach size to compare organizations like yours with everyone else. Raw counts largely track population (Spearman ρ = 0.97 across 51 states), which is why CA leads with 331 reports; per million residents from 2022 to 2026, DC (20.3), NH (18.9), MA (17.8) lead against a rate of 10.8 across all reporting states.

What this means for you

Raw counts largely track population (Spearman ρ = 0.97 across 51 states), which is why CA leads with 331 reports; per million residents from 2022 to 2026, DC (20.3), NH (18.9), MA (17.8) lead against a rate of 10.8 across all reporting states.

Do this next

Benchmark your risk register against your peer group

This chapter's program actions come with a subscription

Start free and set your program

Organizations like yours

Your peer group, in one number

Pick the entity type and state that describe you. Subscribers get the full benchmark below it, measure by measure.

Pick the entity type and state that describe you for a first headline about your peer group. It appears as soon as both are chosen.

Subscriber feature · $5 a month or $50 a year

See how your peers compare across 10 measures

The full benchmark tests your peer group against every other report, measure by measure: breach types, where the data lived, business associate involvement and breach size, with significance tests, a size band filter and the reports behind each figure.

Hacking/IT incidents
Unauthorized access or disclosure
Theft or loss
Email
Network server
Electronic medical record

Start free Or subscribe for $5 a month

Included with an ExamPrep subscription or as a DueCare site administrator. How linking works

Subscriber feature · $5 a month or $50 a year

Read the rest of Chapter 5: Peers and geography

The findings, every chart with drill-down to the reports behind it, and what to do about it, recalculated for any state, entity type or year range you choose. Unlock all 14 chapters with a subscription.

Where breaches are reported
Entity types across the register
What this means for your program: 1 key point
3 program actions mapped to HIPAA and NIST CSF 2.0, starting with “Benchmark your risk register against your peer group”
Exam angle for 5 CISSP, CISM and CISA domains, with a study prompt

Start free Or subscribe for $5 a month

Included with an ExamPrep subscription or as a DueCare site administrator. How linking works