Why is the M&S cyber attack chaos taking so long to resolve?

The company not saying who carried out the attack - or when their systems will be restored - suggests it's serious.