Law firms are vulnerable to phishing attacks because the data they store is valuable to cyber criminals. Sensitive data like credit card information and addresses can be used to launch further attacks.