This is the response from the ClubRunner Team after I reported that board members had received messages from a spammer:
 
"Thank you for contacting ClubRunner.  This spammer likely used a blind contact from on your ClubRunner website to send you this email.
https://portal.clubrunner.ca/4795/SingleEmail/ContactUs.  This enables guests and prospective members to send emails to your membership without actually seeing your contact information. Unfortunately, this does provide the opportunity for anyone who visits your site to contact you, so sometimes you will get spam.  Please be assured that this scammer does not have your email address or that of anyone in your Club, as the above contact form does not reveal any personal information.

Please delete this email without marking it as spam; since the email was sent through ClubRunner, flagging it as spam will place you on our suppression list."