The existing regex does not restrict where the match may fall in the string, and so putting bogus characters before or after a valid UUID gives a match as BBID.