What tells me it is a hacked email address is that the reply to email is different than the email that sent it.
I get emails here at my work and it looks like it was sent from a previous employee with the company email address. But when you open the email the email address next to the name is not the same.

But at least they can look into it and maybe figure out what's going on and get it fixed.