contact bank and credit card company so that

she won't be responsible for any unauthorized transactions.

Contact credit rating agency (TransUnion and etcs) to prevent identity theft. They can raise a fraud warning flag in her account to prevent the thief from using her infomation to apply new crdit cards.

She need to do both.