I'll be the last to say that was stupid, not that long ago I made a similar gaffe. Ever since I have the autocompletion in my email address bar set to off, and I would advice everybody that deals with sensitve data on a regular basis to do the same. It's all too easy to send an email to entirely the wrong person like that.
Oh, and another easily avoided error is 'reply to all'.