(1) Data Compromises include data breaches, data exposures, data leaks, and unspecified events as defined by the Identity Theft Resource Center. (2) Victim Notices include individuals and accounts receiving notices for a single event or across multiple events. It is not a 1-to-1 count of actual victims.