University of York hit by cyber-attack - personal details of students and staff may have been stolen