: UK data regulator says failures were unacceptable for a company managing the world's passwords