I worked at a grocery retailer, and we had the same exact thing. The CI/CD pipeline was firing out order related SMS messages to a contractor's number during test runs for years.

I wonder how common something like this is.