The recent decision of Thomas v. Corbyn Restaurant Dev. Corp., 111 Cal. App. 5th 439 (2025) is a wake-up call for all law firms handling client funds. Even the best-intentioned lawyers can, through a single lapse in protocol and judgment, find themselves liable for a six-figure settlement vanishing into the hands of cybercriminals.