I'm taking a guess here, but I bet the PIN on her new remote is the same as the one on her old E* account or something easily guessed by a family member (b-day, telephone number, street address). Like others have mentioned, she should change it to something random and be careful not to write it...