The UK’s data protection watchdog has fined a software provider £3 million over a 2022 ransomware incident which disrupted some NHS services.