I too think the email was hacked.

Rather than reporting it to HR, it should go to the IT department; they have a security issue.

Rant away, lord knows I do! Hee heeeeee