The UK's elections watchdog has revealed it has been the victim of a "complex cyber-attack" potentially affecting millions of voters.