Three insurance companies have admitted breaking data protection laws by possessing personal information on 15 people which was obtained by a private detective from a leak in the Department of Social Protection.