Since 2008 there were close to 9,700 breach events in the U.S. involving more than 10.7 billion records, with an average cost of $148 per record. California is the state with the most publicly documented breaches, with 1,493 incidents affected 5.59 billion personal records. Most of the personal information came from unauthorized access in 2011 of up to 250 million email addresses and names managed by marketing company Epsilon. Oregon suffered at least 157 data security incidents that exposed 1.37 billion records.
Source: https://www.bleepingcomputer.com/news/security/the-us-loses-over-15-trillion-in-a-decade-of-data-breaches/