I think it might be a case of someone testing the delivery/ordering software in production with real data instead of dummy data?

That would explain why it went on for years. The test data won't be updated quickly and no one would flag it because it is not supposed to be a real order.