The Information Commissioner’s Office said Advanced Computer Software Group had been fined over security failings that put personal data at risk.