Brighton and Hove City Council said it had "significant concerns" about the firm's data breach.