are the clients addresses on your home system, if so then that is the likely vector.
“are the clients addresses on your home system, if so then that is the likely vector.”
Good question. No. That’s the point. They are not on my contact list in Outlook but I know I have exchanges email with these people few months or years ago, emails that were deleted.
I often receive emails like this from clients and I know that they have been hacked. But this time, it looks like they have been hacked at the same time, which makes no sense...