I figured she'd just shut everything down and was taking time to either re-asses things or simply make new perofiles, once they've been compromised, it's not worth messing around just do what banks do and close affected accounts and start from scratch so there are no links old to new