While the numbers are impressive,this kind of stuff can be easily done to a lot of companies. If a company lacks proper PO system or things often get done in excel instead of CRM/ERP or similar software, it's pretty tricky to chase all the ends properly. I personally seen many examples where legitimate suppliers double invoice,enter random amounts or inflate them by quite a lot.And these suppose to be the people you are having business with.