Medical data breach types by year (2021 to June 2022)

Breach definitions: Card (debit/credit card not via hacking, e.g. skimming), Disc (unintended disclosure, e.g. sensitive information posted publicly), Hack (outside party or malware), Insd (insider–employee, third-party, or customer), Phys (paper documents), Port (portable devices, e.g. laptops, memory sticks, and hard drives), Rans (ransomware), Stat (stationary computer), Unkn (unknown).
Chart: Comparitech