Nobody hacked surfermarly. She inserted her key on a third party site and the person had an easy job to log in and change her password.