Phishing attacks targeting confidential client communications, ransomware targeting case files, and unauthorized access to privileged legal matter data. Law firms are high-value targets because of the sensitive, time-critical nature of the information they hold.