If you have a really old key from before some security updates and reuse the same receiving address over and over it's possible. Some people don't even encrypt their wallet in the first place which isn't very bright.