Marks & Spencer has revealed customers' personal data has been taken by hackers after it was hit by a damaging cyber attack.