Essential guide to understanding cyber-attacks on law firms