A senior data protection official has described as "shameful and shocking" how a number of credit unions helped private investigators dupe civil servants into handing over citizens’ personal details.