That's very strange, I would imagine that a hacker is in her email trying to get credit card, financial, SSN, PayPal, etc info.
Why go in and take the extra effort to cancel a flight? I wonder if it was someone who personally knew your friend and was taking it out on her.