The software security nonprofit Open Worldwide Application Security Project (OWASP) said a possible data breach may affect anyone who was a member of the organization from 2006 to 2014.