UK retailer discloses that breach came via supplier and warns online operations will be disrupted until July