A leading cosmetic surgery provider has been targeted by a computer hacker who may have accessed details of nearly 500,000 people considering procedures.