The Electoral Commission has confirmed it failed a basic cyber-security test around the same time hackers gained entry to the organisation.