The article says that they say it only affected customers that check out as a “guest”. Presumably most customers use an account when making a purchase.

That said I saw the people reporting it initially saying you didn’t even need to submit the form to be affected so I don’t know how they can tell how many customers were affected.