Did the message indicate specifically which account was hacked or did it just say her account. BS simply saying “account” is a common tactic. I’ve gotten a bazillion email scams that start with “Dear <email address> There’s a problem.”
More than once I’ve gotten a text saying “pay $xx.xx today or else” that was sent to multiple people. It’s amazing we all own the same amount at the same time. I get lots of e-mails sent with no To: address, just a slew of CC: recipients.