The regulator found some children's business accounts had been set to public by default. Continue reading...