How can this happen, If it's outside her family or friends ?
I'm assuming it is friends or family.
But how could it happen otherwise? Email inbox could become compromised and thus from there the person could reset her password to what they want. And do that for most other websites as well. Actually, that's another good reason for a temp posting restriction.