Carphone Warehouse fined £400,000 after serious failures placed customer and employee data at risk.