Email notification from noreply stating that specific user is cancelling user meetings

Hello,

We have been receiving email notification from no reply that one of our internal users is cancelling meeting. We verified that the email is coming from RC with our email security team but RC is saying it was not generated on their system. No meetings were cancelled and the internal user that supposedly cancelling the meetings is not even a participant of the meetings. Anyone experienced this before, its weird, i feel like RC is being spoofed.