Someone appears to have set up one of your servers and is sending out emails that appear to be from our domain.
How do we stop this scumbag doing this?
You must not be using SPF records. Get one set up for yourself and this problem should be mostly eliminated. Consider setting up a DNSSEC record for your domain as well.