Hackers breach E27, want "donation" to reveal vulnerabilities