[Jon M]

Do you have anything of more detail like actual email server logs? You may not actually be sending emails out or at least not to the location you think they're going.
Can you copy and paste the full header details of one of the sent messages in here.

If you suspect any bank details have gone out, then I would phone the bank and get her account blocked until further notice, or whatever they recommend.