Millions at risk after attackers steal UK legal aid data dating back 15 years