A family that was targeted by scammers fear their experience has exposed a security loophole in an online travel agent's ...