They may have had to restore a backup. Or someone in marketing keeps their own database which doesn't get updated properly.
Or they were just going through the GDPR motions, and know that the ICO is too busy to chase after everybody.
It was a massive faff when it happened here. We had to email every client to fill in a form when they wanted to book travel, strangely we no longer do this