Bank account information and users' passwords are among details feared stolen by hackers in a security breach at a service used to raise donations from millions of people.