Ticketmaster fined £1.25m for data breach after it waited nine weeks to monitor fraudulent activity