Yes, you got the sequence of events right.
I don't personally know any of the people involved. Just a third person (well, fourth) who is assuming most lawyers would want to know if somebody is using their name, firm address, email address, to send a threatening letter to someone else.