Paranoia, chaos and staff sleeping in the office: Insider reveals M&S ‘had no plan’ for cyber attacks