Marks and Spencer (M&S) confirms tha; customer data was stolen in a cyberattack last month, when ransomware was used to encrypt servers. [...]

https://www.bleepingcomputer.com/news/security/mands-says-customer-data-stolen-in-cyberattack-forces-password-resets/