Action taken against firms over Covid-19 breaches