I work at a small nonprofit and woke up to find that many of our email addresses have been sending spam asking recipients to open an attachment (doc file). We have a local network that all of our computers are connected by. I'm not sure about the security of it. We also have our website and emails managed by a third party.
Is this issue more likely to be caused by our local network being compromised or the web server?