https://www.forbes.com/sites/daveywinder/2019/08/05/cafepress-hacked-23m-accounts-compromised-is-yours-one-of-them/#68e12789407e
Thanks to https://haveibeenpwned.com/ for bringing this to the attention of previous CafePress.com customers. CafePress has not released an official statement about the supposed data leak but HIBP has an excellent track record of reporting legitimate breaches.
Personally, I haven't used CafeExpress since 2008 and I'm shocked that any data I generated there would still be available today (if the breach was recent and not years ago). What's the point of harvesting data for that long?