Leeds United have apologised after a cyber attack compromised card details for what the club say is a ‘small number’ of customers on their retail website.