The findings, which have not previously been reported, raise questions about evidence the firm gave to a parliamentary inquiry about the extent of the breaches.