UK bank blamed ‘human error’ for data breach after it sent a client documents prepared for quarterly update