The personal information on thousands of criminals in England and Wales has been lost on a USB drive.