Issue with Resource Alert triggered

Hi Experts

The user community received email notifications from DEV2 for the learning overdue which was supposed to not to happen.
If we check the Alert History, we got below observations.
We could see two notifications got triggered for one of the employee. Email Notification triggered to the employee even though we had masked work email as per recipient. but Username is user real email address.

Unable to understand how the real user got the email from DEV2 even though we masked the emails for both employee and manager.

Here are our observations:

1. Employee username is an email address.
2. Log says, NON-Production environment but profile is not set ORA_HRC_USE_BPMCONFIG_TEST_EMAIL.So,will send emails to actual users. But as per setup Profile:ORA_HRC_USE_BPMCONFIG_TEST_EMAIL = N.