Law firms have often been described as the “soft underbelly” of cyber security or the “path of least resistance to steal sensitive client information,” as one Canadian forensic expert put it. Down south, the U.S. Federal Bureau of Investigation went so far as to warn law firms that they are not doing enough to guard against cybercrime.