Beauty specialist Lush has suspended online sales after hackers broke into its site, jeopardising customers’ financial data.