After Barnes & Thornburg learned that an unauthorized person accessed some of the firm’s emails in April 2018, the firm told state officials it had taken steps to minimize the breach—and to prevent another one.

The Am Law 100 firm said it began an investigation with “a leading computer forensic firm” and notified affected residents in letters, offering them one year of credit monitoring and identity theft protection. It was also “redoubling its ongoing efforts to educate and train employees on how to recognize phishing emails,” the law firm said in a data breach notification form to Indiana state officials.