How would someone know to email a hacking attempt to an unpublished email address?

[mahina]

I received an email that looked like it came from an employee where I work asking how to change his banking details for autodeposited payroll. It wasnʻt from him, which I only found out a couple of days later when I clicked on the sender after a baffling conversation with the person that I thought had written to me.

The first weird thing is that it was sent to (my name)@(our work url).com

We donʻt use those addresses. We never finalized them after signing up for them on our site…somewhere.

How would someone who found that to even use? Would they have used AI to search?

The company is very small and this seems like a lot of effort. But it is quite alarming because I thought it was from the real person.

Thanks you folks