Revoking Email Access For Users - Inboxes Contain Communications With Lawyers

I'll try to make this as short as I can but could really use some insight, I dont know if what my boss is requesting is legal but he implied I could be in legal trouble for not following directions. Using a throw away account, I'm in my mid twenties in the US and have never been in a position like this. I've been having panic attacks all day about the situation.

The CEO/board member/founder and other C-suite exec (my boss) asked me a month or so ago to revoke the access of 3 email addresses from 3 users and create them new emails since they no longer work for corporate. At some time or another, all 3 of these people were board members. 2 are still franchisees that used to work for corporate as well as for their franchise, since those emails have some corporate comms in their inbox and access to corp related drives/systems they feel that as franchisees these people shouldn't have access to. The 3rd email they asked me to revoke was used by previous CFO, who is still currently a majority owner and board member, and our current CFO is struggling to locate invoices for the previous year for the yearly audit because they're in the previous CFO email but they haven't been responsive, and the audit is pressing.

I have been trying to push this off with them for weeks because these 3 people have communications with their lawyers for active cases within these inboxes, the board members are all suing each other for one reason or another. They kept pushing that it had to be done, and that we won't go through their inboxes (other than finding company related invoices). I even tried cc'ing our franchise llc lawyer on my emails with our CEO about this, but he didn't respond to me. Finally it was implied that I could be in legal trouble for not following their directions, and unfortunately I can't afford to lose this job. So I've made sure to have their request for me to do this in writing, my response and vocalizrd hesitation as well as my attempt to get confirmation from the business lawyer that we're allowed to do this, all has been noted and saved.

Today they had me revoke the emails, all 3 responded with their lawyers card. One called to let me know I'll be subpoena'd regarding this.

I suspended the revoked emails so that no one can login to them to view the private communications between them and their lawyers. But I don't know what to do from here to protect myself and these 3 users private information, or if I've made a grave legal error by following orders.

I dont necessarily trust what my c-suite is telling me about how I wont be in any legal trouble for this. I have a recorded call with my boss with him telling me that because the boss asked me to do this, legal liability wouldn't fall on me.

Any perspective and advice is appreciated, thanks for anyone that took the time to read this mess. I can't afford legal counsel.. I can barely afford to get by each month. So this will have to do for now.

Edit: I'm in UT, the 3 users are now all in PA but 2 lived in UT up until last year.