Neopets, the virtual pets website has exposed a wide range of sensitive data online including information that might be used to identify site users, security researchers report.