I doubt the recipient was required to sign a non-disclosure agreement before reading the letter. If the recipient has no contract with the company, he has no obligation to follow its internal policies. It becomes a Freedom of Speech issue once the recipient receives the message.