M&S confirms customer data was compromised in cyber attack, payment information unaffected