NBC: Children's data hacked after school software firm missed basic security step, internal report says