Nearly a million non-profit donors' details left exposed in unsecured database