With the Electoral Commission just the latest target on a list that includes the economy and supply chains, experts warn of data-gathering ‘on an industrial scale’