Marks & Spencer, the iconic U.K. clothing and food retailer that’s seen its online operation shuttered for more than three weeks following a cyberattack, on Tuesday said for the first time that customer data was taken.

U.K. retailers Harrods, Marks & Spencer and Co-op have all reported cyber intrusions in the past weeks. A hacking group known as Scattered Spider hasn’t been publicly named as t

Marks & Spencer has said there is 'no evidence' that usable card details, payment information, or account passwords were compromised in the cyber incident.