Blood donation firm reveals donor personal data stolen in cyberattack