What happened in the recent data incident involving less than 200 Shopify merchants?

I don’t understand. If the fraud occurred before the incident then how can it be related to this breach?