The chairman of UK retailer Marks & Spencer (M&S) has refused to answer whether or not the company paid ransom after it was hit by a ransomware attack in April.