It might be that the randomization code was bypassed in some cases - like creating an account in safe boot mode or similar.