I checked when I discovered it, and just to be sure I went back after I read this and checked my card's records, my PayPal account records, and my personal budgeting software and there is no transaction on there I did not personally authorize myself...until last week. And the payment she made isn't on my PayPal account, so she didn't somehow get my password.

So, back to not knowing how this happened.