The posted information includes details from VA personal injury cases, pain diary entries, fee agreements and HIPPA consent forms. It is unclear, however, whether clients from the firms are aware some of their sensitive information has already posted to the web.