Honestly, that's a bit too much "Random" and is probably indicative of something bigger happening. IMO it's very unlikely that someone has hacked the WiFi to obtain user credentials.
If I had to guess, she probably uses the same (one or two) user/pass for a number of sites. One of those sites has probably been compromised and the rest just start to fall like dominoes (This is how most Warcraft accounts get stolen).
PM me her IP address and password, I'll gladly take a look. And it would really help if the webcam was turned on.
__________________
|