It could be a single customer, Tor, proxies, etc exist. Further analysis of usage patterns could rule this out (with very high probability) though.

As for 'were you wrong', no, not if you ruled out the above. That doesn't make it something that you should have to do though.