It was caused by their media URLs being 4-letter IDs (16 million max limit) and therefore vulnerable to duplication

I think they also have media IDs generated sequentially and that counter may have gotten out of sync a few times