Law firms hold some of the most sensitive data.