While there is no indication that all, or even most, of the individuals whose PHI was exposed in these breaches suffered any harm, the number still strikes me as extremely disappointing, particularly since a. it has not improved over time, and b. it is lower than the HHS estimate for the next 12 months (18,383).