Symptoms
Assume that you create two users in different Global Address Lists (GALs) and Address Book Policies (ABPs) in a Microsoft Exchange Server 2013 environment. When one of the users sends email messages to the other, although the sender is not in the GAL of the recipient, the recipient can still see the organization details on the contact card of the sender in Outlook Web App.
Resolution
To resolve this issue, install Cumulative Update 7 for Exchange Server 2013.
Status
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.