A friend's instagram account apparently got hacked, and their username, email and password changed.

Has anyone experienced this before? According to Instagram, the old email account should have received an email about that name/email change, which didn't seem to happen.

I can't make sense of how they managed to hack that account. Any pointers appreciated!

[Thanks for Boosting]