Data Protection Commission opened inquiry after people gained unauthorised access to paper records at two disused psychiatric hospitals