The CloudPets user database was stored unprotected online, and weak passwords meant hackers could access stored children's messages