With legal practices shaping up as a ripe target for cyberattacks, experts say many firms have a long way to go in implementing best practice cybersecurity to avoid potentially “catastrophic” outcomes.