Law firm 'didn't think' data theft was a breach, says ICO. Now it's nursing a 60K fine