[Skunkworks] Gmail Account

I have a friend who claims even when she changes her gmail password, there is a guy who is still able to login and access her info. The new password is ussually send to her yahoo account which she has already changed severally. She only accesses her account from job. Except reporting the issue to gmail, how can one prevent this.