One of my users has received an email, probably spam.
What I don't understand is that it is from some 3rd party, but the 'To' field has another one of our users in it.
i.e. it has been received by email@example.com but addressed to firstname.lastname@example.org
We use SBS2003 with Exchange, both SP2. she does not have user2's email address in her profile.