A leading offshore law firm with clients including the super-rich and international corporations has revealed it suffered a "data security incident" that may result in customers' private information being leaked.