UK's Marks and Spencer confirms customer data taken in ransomware attack