Cincinnati Firm Faces $5m Data Breach Lawsuit