It was not clear who was responsible for the two breaches or whether they were related. Large law firms' extensive holdings of confidential business and personal data have made them attractive targets for cybercriminals.