We have tracked the issue to our third party promotional mailing platform. We have taken all the regular security precautions and are in touch with the provider to identify what happened.
Note: this is only an issue with promotional mail. Any emails received from Knockhill in terms of transactions, internal emails from staff, ticket purchases, trackday confirmations or driving experience evouchers are all legitimate and secure.
Thanks again, the Knockhill team.