Music-streaming website Last.fm has warned its millions of users to change their passwords immediately.