British food and clothing group M&S discloses cyber incident