fewer than 10 customers have reported being able to view another customer's account information
It's hard to imagine a security breach so specific that it only affects "fewer that 10" users. Perhaps the significant word here is "reported" - everybody was affected, but only 9 reported it.