Hundreds of holiday cakes were purloined through weakness in internal website.