Why investing in data security is a must for law firms