So what outbound filters did they have in place ?
Try a stunt like that where I work, and it would have been spiked by the outgoing mail filter, which has some very clever rules.
Of course if HP aren't using an outbound mail filter, it does question their competence in the area of advising other people about IT security.