I have part of her credit card number, subscription information and other personal information.  Have contacted Apple because several emails are from them and they said they have disabled her account but they are still trying to contact her through this email address.