This can happen if a new unique index is added as inactive, and then activated using idxbuild. A warning would appear on the idxbuild report.
Had you tried to add the index as active, a warning would have told you that you had duplicate values and would have backed out the adding of the index.
Adding indexes as active is not necessarily best practice, but it is a sure-fire way of preventing duplicates.