@StragglyWizard,
Probably not. Given the size of your staff, you should be able to get to the bottom of it or at least eliminate some suspects.
And then limit the number of people who can use the page to communicate with customers. While you might or might not bar the culprit from using the system, you will send a message that you won't tolerate nonsense. Also, create a company policy requiring either documentation or a signature with every communication.
The barn door may be open, and the horse may be gone, but there's no reason to give up and let the cows escape, too.