Researchers found security holes that gave away personal data and credit card information of children’s parents.