Alabama law firm issues data breach notification