British retailer Marks & Spencer estimated Wednesday that a cyberattack that stopped it from processing online orders and left store shelves empty will cost it about 300 million pounds ($400 million).