Online fundraising site Kickstarter says hackers got some of its customer data.
Kickstarter co-founder Yancey Strickler says hackers accessed usernames, email addresses, phone numbers and passwords.
The passwords are encrypted but it's possible for a hacker to guess a weak or obvious password.
The hackers didn't get credit card information but the site says two accounts have had unauthorised transactions.
Kickstarter Inc. is one of dozens of crowdfunding websites that let people raise money from donors for projects.
News that makes sense
Your trusted source for staying up-to-date with the world around you. Get free daily news updates and analysis, straight to your inbox.
Kickstarter projects have included a Spike Lee movie, local breweries and charitable causes.
Kickstarter disclosed the breach on Saturday on its blog after learning about it from law enforcement on Wednesday. It says it closed the security breach right away.
