Why do cyber-criminals focus on stealing children’s personal data for profit despite the significant legal and ethical risks, and what measures can both organisations and affected families take to prevent misuse and respond effectively after a breach?