With a slightly modified email address to mirror yours, they can easily impersonate you using the personal information provided in the OOO message and exploit your absence. Knowing where you are and how long you may be gone can lead to an attempt to initiate a transfer of funds or access confidential data. They might even go the extra step and reference how great their “trip” is going just to make the message appear genuine.
Again, be as specific as possible and provide as much detail as possible on how they can get their questions answered or problems resolved. This will ensure you come back to fewer fires and headaches.

“For example, if a hacker knows that the chief financial officer of a company is OOO, thanks to the information in the auto-reply message, an attacker could impersonate the CFO on email and target another individual in the company’s finance team asking them to make a payment or update bank details for them while they are offline,” says Sadler.
Therefore, if your email truly is urgent and you need a response while I’m on vacation, please forwarded it to my personal email [email] and I’ll try to respond to it promptly. If you think someone else at [company] might be able to help you, please contact [name] at [email] or [phone], and they’ll try to point you in the right direction. Otherwise, I’ll respond when I return.