PDAs make easy pickings for data thieves