Online fundraising site Kickstarter has warned hackers have obtained some of its customer data.
Co-founder Yancey Strickler said hackers accessed usernames, email addresses, phone numbers and passwords. The passwords are encrypted, but Kickstarter said it is possible for a hacker to guess a weak or obvious password.
Kickstarter said hackers did not get credit card information. It said two accounts have had unauthorised transactions.
Kickstarter is one of dozens of crowdfunding websites that let people raise money from donors for projects. Kickstarter projects have included a Spike Lee movie, local breweries and charitable causes.
Kickstarter disclosed the breach on its blog after learning about it from law enforcement. It said it closed the security breach immediately.