UK government loses bid to limit data breach payout claim