The cyberattack that derailed Marks & Spencer Group Plc’s operations for weeks was the result of a “sophisticated impersonation” of one of the retailer’s third-party users, according to Chairman Archie Norman. The hackers entered M&S’s systems on April 17 and …