In the particular one that came to mind if I recall correctly was a badly configured distro list that let anyone reply to it. Normally broadcast lists like that would be reserved for people on a special comms team, but the permissions didn’t get restricted properly.
A majority of corporate idiots don’t bcc. That’s why the above happens a lot.
There’s a way in most email environments to setup a mail flow rule that will convert any email with over x number of users CC’d to BCC.
The system must handle the idiots, not the other way around
The talk of herding cats comes to mind…
In the particular one that came to mind if I recall correctly was a badly configured distro list that let anyone reply to it. Normally broadcast lists like that would be reserved for people on a special comms team, but the permissions didn’t get restricted properly.