Hi All

One of my clients is having an issue with her online shop.  It looks like it has been compromised and she keeps getting emails from the nopCommerce website of type:

([email protected]) has just submitted a new VAT number. Details are below:
VAT number: BMFA 127073
VAT number status: Unknown
Received name: BMFA 127073
Received address:

The emails are all essentially identical and refer to a new VAT number being submitted although the email address of the person submitting the VAT number and the VAT number itself does change per email.

The emails are definitely coming from the website email address.  There is no customer registered that looks like this so it does not look like this email originated from someone actually trying to register on the site.

Has anyone seen anything like this before and/or can advise how to investigate and fix issue?

Thanks and best regards

Nick