Why couldn't I log in to my website yesterday? It's because, four days ago, somebody hacked my site and replaced it with some neon green colors, misspelled alphanumeric messages of triumph, and other gibberish.
Congrats. You hacked a nearly empty site that was used for testing WordPress plugins. Total damage caused: about fifteen minutes of time spent logging in to my horridly bad web server and changing a few passwords, plus hitting the "reinstall" button on WordPress.
Yes, I was fortunate, because it was a non-business site. Your law firm's website, however, is far more important. Here are a few things I've learned from the experience: