The internet-connected sex toy maker said it fixed the vulnerabilities that exposed users’ private email addresses and accounts to takeovers, but said it was also planning to take legal action following the disclosure.