Millions of US schoolchildren have fallen victim to a massive data breach after a company that tracks their personal information reportedly failed to take basic precautions.