The group says “a small percentage” of its members were affected, with details including name, physical address and email address compromised