The Seyfarth law firm has reported it was the victim of a ransomware attack. If it can happen to them, this is a concern for all law firms.
Catherine Reach has some advice for avoiding phishing scams, probably the most common vector for such attacks.