Almost three quarters of U.K. law firms have had at least one employee password leaked on the Dark Web, according to a new report.