Another idea is that there is a source file that is copied onto the flash card on a regular basis and someone has hacked the source back at the office or something. Seems more likely because that wouldn't require the perpetrator to be on each flight and thus less likely to get caught. Some of these flights play music as you board the plane, could it be that this comes from music on a flash card and someone has replaced that?