British retailer Marks & Spencer believes the instigator of the cyberattack which forced it to suspend online shopping for six weeks in April and May was a group called "DragonForce", chairman Archie Norman told lawmakers on Tuesday.