You and they both are doing the right thing. The law doesn't punish people (including lawyers) for completely honest mistakes in sending out information--that does happen after all--as long as the people involved take reasonable steps to protect or secure the information once the mistake is recognized. You did what's right in notifying them; they then did what's right in asking you to destroy it.