Four year olds used to steal their parents' data