The suspect list has been narrowed down to a handful of admin.
My first inclination is to send different (juicy as it were) information to different people coming from a teacher unaware of the situation and claim that I accidentally used bcc instead of cc and apologize in an email sent to all the admin staff for "my poor use of tech", thus lessening the suspicion of misinformation. This would hopefully entice the perpetrator to share some identifying info in their next email.
What do you think is the best course of action?
I know this is weird, but there are a lot of people here who are smarter than me and I figured it was worth a shot.