Middletown data breach exposed Social Security numbers, personal information of residents

MIDDLETOWN, Ohio (WKRC) — The City of Middletown is notifying residents that personal information was exposed during a cybersecurity incident that affected city systems last year and may have compromised sensitive data, including Social Security numbers and financial information.

According to a notice issued by the city on Wednesday, officials learned Aug. 17, 2025, that certain systems within its network environment had been affected by a data security incident. An investigation later determined that an unauthorized third party removed files from the city's network between July 29 and Aug. 17, 2025.

The city said it discovered May 18, 2026, that the files contained personal information, including names, addresses, Social Security numbers, driver's license or government identification information, financial account information, medical information and health insurance information.

Middletown officials said there is currently no indication that the exposed information has been used for fraud. However, the city began notifying affected individuals June 3 and is offering complimentary credit monitoring to those whose Social Security numbers were included in the compromised files.

The city is also encouraging residents to review statements from health insurance providers and monitor financial accounts and credit reports for suspicious activity.

In the notice, city officials said they launched an immediate investigation after discovering the incident and retained third-party cybersecurity professionals to assist with the response. The city said it has taken steps to protect personal information and is continuing to evaluate and strengthen its cybersecurity measures.

"Middletown remains fully committed to maintaining the privacy of personal information in our possession," the city said in the notice. "Middletown continually evaluates and modifies its practices to enhance the security and privacy of personal information and are taking measures to augment its existing cybersecurity."

Residents seeking additional information the breach can the city's dedicated response line at 877-424-7139. The hotline is available Monday through Friday from 9 a.m. to 9 p.m. Eastern time.