Cyber criminals may have exploited the coronavirus crisis to access data held by businesses without their knowledge, a cyber risk expert has said.