Cyberattack concealed political spending by big donors before US midterm elections