M&S says customers' personal data taken by hackers