Play.com hit by security breach