Exactly this, though anonymizing production data properly so it can be used as test data is very hard.

Generating useful test data is much better, but it's hard to represent all the edge-cases you see in Production.