39% breached, most exposing client data. Firms hold the material clients assembled precisely because it was too sensitive to handle alone.
A privately held operator using the same product would have had the same exposure and, quite possibly, produced no public record at all.