Yesterday and today a lot of our customers received email to reset password, which they didn't request. How can this happen? Are we being attacked? How to prevent that? How can we find who got the emails? SOmehow one of our guy deleted them from QueuedEmail table.

Thanks a lot!