LONDON, May 13 (Reuters) - British retailer Marks and Spencer said on Tuesday some personal customer information was taken in the cyber attack that has crippled its online operation for more than three weeks.
"Today, we are writing to customers informing them that due to the sophisticated nature of the incident, some of their personal customer data has been taken," the company said.
"Importantly, the data does not include useable payment or card details, which we do not hold on our systems, and it does not include any account passwords. There is no evidence that this data has been shared." (Reporting by Sachin Ravikumar and Paul Sandle; editing by Sarah Young)