Data breach firm given access despite DfE probe