Really?
A firm of solicitors. A home hub. A flat network. An Asterisk pbx (nothing wrong with Asterisk in essence but their IT company is happy for them to use a BT home router as their firewall which makes me think the Asterisk config is also full of holes).
It should be the IT company being fingered for this but I suspect it's one of the solicitors relatives.