Hundreds of M&S agency staff told to stay off work after cyberattack