attorney data breach protection