British retailer Marks and Spencer said on Tuesday some personal customer information was taken in the cyber attack that has crippled its online operation for more than three weeks.