Marks and Spencer has become the latest retailer to fall foul of a third party security breach after its email supplier Epsilon lost customer data.