Today my girlfriend recieved an email from Gmail saying:
Someone recently tried to sign in to your Google Account, @gmail.com. We prevented the sign-in attempt in case this was a hijacker trying to access your account. Please review the details of the sign-in attempt:
May 9, 2012 12:28pm GMT
IP Address: 18.104.22.168
Location: Valencia, Spain
If you do not recognize this sign-in attempt, someone else might be trying to access your account. You should sign in to your account and reset your password immediately. Find out how at http://support.google.com/accounts?p=reset_pw
The Google Accounts Team
I have changed the password. Is there anything else we can do? She has an iPhone; could there be a security issue with this? Facebook and Instagram are her most used apps.