A study by Dashlane Security indicates that lax cybersecurity policies could leave holiday shoppers vulnerable online.