Just before ffxiv released another gaming site was hacked. In reading other forums it looks like a lot of people share account names and passwords between the two. People with stored credit card information have also had their money stolen. Has she played other mmos?