Only a tiny fraction of closed data breach investigations by the Information Commissioner’s Office (ICO) have resulted in fines in the past year, new figures have revealed.