Debenhams has revealed that up to 26,000 customers of its Flowers website have been hit by a cyber attack on their personal data.