I have a customer on 2021.2 Advanced in a multi-user ( Terminal Server ) environment contact me to say that at least one of their paperless emailed invoices appears to have added another of their customers as a BCC.

The person who was added as a BCC was also a recipient of an invoice just before the invoice in question --  in the same batch - further deepening the possible mystery.

They have a copy of the email ( because they added themselves as an additional TO: ) and it clearly shows a BCC.

When I look in paperless at the document the distribution seems to be correct ( there is no BCC showing ).

The "Use Lockfile" is enabled for paperless

I guess it's possible someone manually added the BCC then removed it prior to updating the invoice though I don't suspect that to be the case as the person doing the processing is experienced.

Thoughts?