All it takes is for her to click a link on a s41t site somewhere on the net, it installs a keystroke logger on her computer, she logs in, they got her password, now the tardlings can have their fun at her expense.
Her account DID get hacked, it was NOT a WAG at her password.  I can almost guaranTEE there is some crap on her computer, she would be very smart to thoroughly scan that thing or re install to be honest.  If they got this one, god only knows what others are compromised.  Banks, Credit Cards, etc etc.
Aaron