It happens on the instance I run. Its been happening for some time now. AFAIK he is the only user it happens to and the transition is always to the same user.
I checked logs to make sure hes not butt dialing the impersonate button but I dont know where else to look to track this down.