Malpractice firm loses hard drive with patient medical records

An employee at the medical malpractice firm representing cardiologist, Mark Midei, MD, who has been accused of performing unnecessary stent procedures, misplaced a hard drive containing patient medical records. Should law firms be subject to HIPAA regulations?