All the fucking time. While there is an attempt to avoid and standard deployment procedures hopefully. Sometimes in an emergency you just get shit done and fixed for a client. I heard a mantra regarding this from a pretty big consultant at a major company: be bold be brave, deploy

I guarantee your financial information has passed through that product.