I actually wouldn't be that surprised if some numpty ran the code then it took them days to notice because everything's automated, and they just didn't have orders to do anything once they realized what was up.
Of course they wouldn't wanna admit any of this, because it would prove how incompetent they are.
Some companies have taken months or years to even notice they were hacked, then months more to react.