Dutch watchdog says tax authority failed to secure data