Carphone Warehouse fined £400,000 over 2015 data breach