British NHS DDOS attacks itself via email sent to 1.2M staff

Also happened at IBM when I worked there. A guy named Armando changed his phone and manage to send a notice to everyone in the company using a maillist. People didn't know about the maillist and started to ask to be removed, turns out it was not possible... It took weeks to solve and everyone at IBM pretty much lost access to email during the period due to the overload. Even worse, at the time a lot of internal systems at IBM were based in Lotus Notes that is a weird framework email client mashup and those systems were also affected.

This happened in 2007

At the very least, the operations accounts, security, newsletters and Simon Stevens himself should have the ability to send a network-wide email - outside of that there's no good reason for Johnny intern to be sending an email to that many people.

This may be a mailing list, rather than a simple 'Reply-All' thing (and the media have misunderstood). The reply box will be a single address if that's the case.