Cecile: Cecile Online Shop was hit by a credential stuffing attack, and one of 21 login attempts succeeded, so customer information may have been viewed

From a domestic IP address, "impersonation" access with email addresses and passwords was tried 21 times, and one login succeeded. [1]

It announced that, through impersonation using account information believed to have been obtained illegally elsewhere, a third party may have viewed customer information. [1]