What can I buy online at M&S since the hack?

Marks & Spencer has started taking some online orders again, as it continues to recover from a major cyber-attack.

The firm put orders on pause in late April, and has said it would be July before they were back to normal.

It has told customers to remain cautious about receiving emails, calls or texts claiming to be from M&S, after some customer data was stolen in the attack.

As well as disrupting its online business, the hack affected the company in-store too, leaving some shelves bare in the days after M&S was targeted.

Here's what we know about the attack and the impact it is still having.

M&S announced on June 10 that a small selection of fashion products were now available online for home delivery.

But these are only for customers in England, Wales and Scotland.

M&S said orders for people in Northern Ireland will open up "in the coming weeks".

The company has also extended its delivery times to 10 days "in order to manage customer demand".

Click and collect is still not available but will also return soon, the retailer said.

M&S has admitted some personal customer data was taken during the attack.

It says information stolen could include contact details such as people's names, home addresses, phone numbers or email addresses, as well as dates of birth and online order history.

But it does not include useable payment or card details, or account passwords, M&S says.

The retailer will prompt customers to reset passwords for "peace of mind".

It adds that while users do not need to take any action, they should remain alert to possible attempts to extract or misuse their information.