The Information Commissioner’s Office (ICO) has fined Interserve Group £4.4m for failing to keep personal information of its staff secure.