Marks & Spencer admits cybercrooks made off with customer info