it only takes
One idiot, (normally in sales)to select the wrong field and you will have a serious issue.
It's easy enough to prevent in exchange etc by setting maximum recipients to a sensible value. At least it will limit the damage.
Sophos SEA (mail scanning appliance) can also do rule checking on outgoing mail to prevent this problem as well.
Biting the hand that feeds IT
