Exchange Online receiving "received-spf: Fail" spam from own domain

Dear,   Our users (Echange Online) experience phishing emails in their mailboxes, coming from their own email address. The header info states:   ... From: Patrick  <patrick@xxxxx.be> To: Patric...