The Information Commissioner's Office (ICO) has handed down a £4.4 million fine to construction group Interserve, after attackers stole personal information on more than 100,000 employees.