Toronto residents’ data improperly shared with councillor’s office in privacy breach