I can still see a path where the manager was stupid but not malicious. The manager sent on a document which he was too lazy to check at least had the right endpoints but left the GP's contact details on.
I could also imagine intentional harm to GP's reputation was the goal, with really clumsy execution.