An excess of 20 million patient records have been stolen, hacked, lost, improperly disposed of and/or subjected to unauthorized access since the Aug. 2009 Breach Notification Rule requiring HIPAA-covered entities provide notification after a data breach involving 500 or more individuals. Here's the breakdown of these healthcare data breaches by state.

[See also: Slideshow: 10 biggest HIPAA data breaches in the U.S.]

Click on image to enlarge.