One moment ..
From: Peter Anderson (M) email@example.com
Date: Sat Apr 10 2021 07:22
Subject: Thoughts about yesterday's scam
To: Committee only 
It's obvious to me that the scammer got the names and email addresses of committee members from the 'Contact' page of the website, which is of course public.
I suggest we do the following:
1. change committee email addresses, perhaps by adding two or three digits after the first word. So for example, "firstname.lastname@example.org" would become "email@example.com". And then put an 'Out of Office' message on each of the old addresses, directing people to the Contact page..
2. I remove the email addresses and phone numbers from the contact page
3. I create a contact page for each committee member (with email address hidden from view).