Half of UK finance firms risk breaches from poor data