It appears the culprit had access to Mukund Shyam's emails.  Why Mukunda Shyam did not change his password to long into his email account? If he did change the password and the culprit still had access to Mukund Shyam's email account, then the  culprit has to be either office computer system analyst/operator or higher up boss who can see anyones emails in the office.