Medical data breach types by year (from 2021 to July 2023)

Breach definitions: Card (debit/credit card not via hacking, e.g. skimming), Disc (unintended disclosure, e.g. sensitive information posted publicly), Hack (outside party or malware), Insd (insider–employee, or customer), Thrd (a third-party vendor), Phys (paper documents), Port (portable devices, e.g. laptops, memory sticks, and hard drives), Rans (ransomware), Stat (stationary computer), Unkn (unknown).
Chart: ComparitechCreated with Datawrapper