I had a job that revolved around accessing this sort of data on law firms' email servers and putting it to use. The level of care they took around protecting t

I had a job that revolved around accessing this sort of data on law firms' email servers and putting it to use. The level of care they took around protecting themselves from us differed greatly. The actual IT competence behind these differing levels of paranoia is an entirely different question. I don't think their websites have anything to do with it, because hacking their websites won't get you access to their email accounts. For example www.cravath.com shares an IP with www.nutter.com.