Marks & Spencer said data had been accessed by the cyber criminals but said there was “no need for customers to take any action".