Marks & Spencer has revealed that some personal customer data was stolen in the cyber attack which continues to disrupt its services.

The High Street giant has not disclosed what specific information was taken but said it did not include “useable” payment or card details or any account passwords.

M&S was hit by the cyber attack some three weeks ago and is still struggling to get services back to normal, with online orders still suspended.

The retailer said customers would be prompted to reset passwords for accounts “for extra peace of mind”.