The disclosure by Cravath Swaine & Moore, which reported a “limited breach” of its computer network last summer, is rare for a big law firm.