Customer data stolen in cyber attack, M&S confirms

The retailer said the personal information taken included online order histories but not useable payment or card details, or any account passwords.