It is equally probably that the form was changed by a rogue employee(s). Anyone who says otherwise doesn’t have the fact to prove it.
You can’t tell me that no one can identify the person who changed it and why!