“How the hell does someone get away with this kind of theft for so long?”
That’s what audits are for.
Sounds like someone dropped the ball......or was in on it.
Had to be in on it. Any competent auditor would have discovered the problem with the confirmation of balances from the banks. Compare those balances with a bank reconciliation, and you get, “ we seem to be off about $12 million “, lol.