Donor names, phone numbers, e-mail addresses, bank account numbers, credit card numbers, security codes and expiration dates may have been accessed.