I just got an email from a user of my MEF forum saying "I looked up Eric's name to see what messages he had sent and the replies that bothered him and found a bunch of messages between you and Eric under STAFF." 

This user does not have access to the staff section and this sounds like a bug in the software if any user can look up another user's name and read messages from them in private sections--can you please look into this right away?  Thanks.