November’s attack against Cadwalder is just the tip of the iceberg: more than 750,000 Americans had personal information compromised in law firm hacks since 2020, public data shows.