Security vulnerabilities and secret data tracking result in significant financial hit for Canadian sex toy firm