Re: [we] "have taken a lot of time to do things right"
They mention in the article a domain registration that was similar to the company email domain, they also mention that Dr Fisher did lots of work with the company and was well known.
I'm assuming they put those two together for a realistic looking from address and spammed the entire company hoping that someone would bite.