California data breaches hit 21.3 million accounts