More than half of residents in several states were exposed to a health data breach in 2021