Redacted but these "Groups" were the only ones intended to receive the info BUT only 1 group had people in it others were empty, yet so many outside these groups got the email (all internal people). Now since I have rebuilt the groups, but all looked well so from this I cannot see HOW the email could have gone ANYWHERE but to the intended recipients.
Header Name Header Value
Content-Type application/ms-tnef; name="winmail.dat"
To _Grp <Grp@>, Managers <Managers@>, <Corporate@>
Subject Closing Report 10/19/15
Thread-Topic Closing Report 10/19/15
Date Tue, 20 Oct 2015 12:14:43 -0700
X-KSE-AntiSpam-Interceptor-Info internally-submitted e-mail
X-KSE-ServerInfo -exch01.xxxx.local, 9
X-KSE-Antivirus-Interceptor-Info scan successful
X-Auto-Response-Suppress DR, OOF, AutoReply