Fraudulent Entry in Shipping Address

Hi folks! So I am stumped. Yesterday I was poking around my iPhone settings and saw that my shipping address wasn't correct. It listed my first initial and last name. But under that, it listed "C/O [name withheld]. The address was also incorrect -- it was a residential home in Virginia, where I have never lived. I googled the name listed in the C/O line, plus the address, and realized this was the name and address of someone I had worked with back in 2007 and hadn't seen or spoken to since. I googled him and found his phone number online and called him. I knew this gentleman well, and I can say with certainty that he definitely is not a fraudster. So then how did his name and address end up in my shipping address in my phone?

We both called Apple, and the company had no idea how this had happened, but they could confirm that no purchases were made that were sent to the address in Virginia. They also couldn't tell me when that shipping address had been added in my iphone. In fact, Apple didn't seem terribly interested at all, because there was no monetary loss.

Here's one twist -- this gentleman and I were both compromised in the OPM hack years ago. So our information is out there.

Anyone have an idea how this could have happened? The gentleman's details are not in my iPhone contacts, and frankly I can't think how this could have happened. I haven't seen or spoken to him in 13 years, and neither of us knew each other's personal email addresses or phone numbers.

Thanks in advance!