California Attorney General Kamala Harris released a report detailing the nature of data breaches reported to her office over the past four years.  The report includes information about the industries most susceptible to data breaches and the most common types of data breaches and data breached.  It also provides recommendations to companies to improve their security and incident response, emphasizing that companies that collect and retain personal data have the ethical and legal responsibility to take reasonable security measures to protect it.  In the data security field, of course, regulators’ “recommendations” have a way of becoming the law of the land through case-by-case evaluations of whether breached companies’ security was “reasonable” or “ adequate,”  so companies that collect information from California residents should take note.