Submissions alter hidden field values

I’m getting repeated robot submissions that are clearly from the same source.
What’s really weird is that the value of hidden fields are altered or entirely replaced…

reCaptcha v3 is active.

Example of altered value:
[hidden ADDRESS “Roadstreet 1-3, 12345 Citytown”]
shows up in email notifications without spaces:
Roadstreet1-3,12345Citytown

Example of replaced value:
[hidden URL “https://website.com/page”%5D
shows up in email notifications with a replaced URL
https://access-center.org/image.php?id=sc_1704939932

The IP of the submitter are from all over the world. (i’m tacking IP)
The submissions always come in 3 within seconds
The replaced URL always starts with “https://access-center.org/image.php?id=sc_”
The submitter’s email domain is almost always “@supersendme.org”
The submitter spoofs a variety of OS and Browsers (I’m tracking UserAgent)

Any ideas what’s going on here?
Security hole in CF7?
What can i do to mitigate?

Thanks for your time!