The town says they've been spoofed. That's when a criminal sends fake but convincing emails impersonating another person from a domain that looks like or very close to the real sender's email address.

Security researchers find phishing emails spoofing LinkedIn notifications The emails are distributing the ConnectWise Remote Access Trojan There are multiple red flags, including fake companies ...