Sensitive personal information, passwords, and financial data can be stolen and sent to a remote server.