Or, its current employees...an inside job.
There seemed to be a situation a while back where people travelling on QR were having their (velocity as it happens) frequent flyer details changed between checking in and boarding the flight. So someone would change the FF number to be a different one using a second Velocity account with the same name. Upon retroclaiming they'd be told the points were already processed.
