Cyber criminals are giving corporate litigation departments yet another reason to worry—that organizations could be on the hook for their law firms' data breaches.