I have a user that a few times has addressed an email to a small group of people but a much larger group gets the message.
In the sent items folder on the message, The "To:" has 20 recipients with no groups, but the properties tab shows it was Delivered to the whole department of 64 accounts.
I checked the rules on her account and none were active.
What may influence this?