Personal data of up to 8,000 customers of Oxford’s Ashmolean Museum has been accessed in a cyber attack on the museum’s website.