Law firms have data breaches too
In the summer, a data breach occured at the law firm Fragomen, Del Rey, Bernsen & Loewy (see link). An unauthorized person accessed the personal information on a number of individuals. Because the breach affected the personal information on at least 500 California residents, the firm had to file a sample breach notice with the California attorney general's office (see link).
If you still believe that you won't be the subject of a data breach, it is time to accept the new normal that it isn't a question of if, but when, you will have a data breach. And, given that you eventually will be breached, you should evaluate carefully what data (including personal data) you keep and how you keep it.