British retailer Marks & Spencer said on Wednesday a “highly sophisticated cyber” attack would cost it about 300 million pounds ($403 million) in operating profit, with disruption set to run into July.