A data breach by Cork Institute of Technology that lead to applicants for a course being given personal details and the marks of 136 other applicants instead of just their own result is being investigated by the Data Protection Commission.