Since October 2009, 1,217 breaches of unsecured protected health information (PHI), each affecting more than 500 individuals, have been reported to the Office for Civil Rights. These breaches have affected a total of 133,253,121 people. As smaller breaches do not need to be reported to the U.S. Department of Health and Human Services, the real number of PHI breaches is certainly much higher. For instance, the Identity Theft Resource Center (ITRC) has found that since 2005, breaches in the medical/healthcare industry have affected more than 156 million people.