Privacy breaches vs. breaches reported by department