It's quite possibly legitimate given that the phone in question was a T-Mobile Sidekick, which just recently had some serious vulnerablilities made
known and exploited. Of course given the fact shes an air-head who probably couldnt remember a 7 digit alphanumeric password she probably set her
password to 'puppy' or some stupid crap like that, in which case she deserves to get owned for picking such a weak password.
I read that her phone was stolen aswell, can't remember where i read it. I have actually seen the pictures aswell from her phone, they are posted on
the internet. Some good ones at that, i would post the link but there is some that is not suitable for children. So you will have to go find them for
yourself.