M&S has written to customers informing them that some of their personal data has been taken during a cyber attack. The retailer was hit by the attack some three weeks ago and is struggling to get services back to normal, with online orders still suspended and many store shelves empty.