Its most likely that both of these shoppers came in on a link posted somewhere that has the zen-id attached to it,

that is the session ID and if posted with a link can easily cause this kind of issue