UK government data breach for millions of children ruled unlawful