The attack, which took place on Wednesday, prompted the company to deny accusations of laxity and say its security was “head and shoulders” above that of its competitors. But it has led to calls for greater regulation of how companies and public bodies manage personal data.