The U.S. Attorney’s Office for the District of New Jersey has charged a California man with money laundering after a New Jersey law firm’s email account was hacked and $560,000 was fraudulently obtained from a client of the firm.

The case serves as a reminder of how vulnerable—and how attractive—law firms are to cybercriminals.