Law firm Allen & Overy hit by 'data incident'