Organised criminals accessed the records of up to 100,000 taxpayers in a breach at HMRC, leading to an estimated £47 million loss for the tax authority.