Any suggestion/thoughts?

Yes, here is a suggestion:

Email is not secure unless it is a closed system. So even if she emailed it to herself it could be vulnerable. Email traffic can travel thru many hands before reaching it's destination. If you want to risk that such sensitive info won't be skimmed off at any point at least realize it is a risk.

I have had multiple employers who prohibit sending any company proprietary or ITAR restricted info thru email outside of the closed system unless it is encrypted. I sure wouldn't send any personal info (ss#, birthdate, etc.) thru email without encryption.

Here are a couple articles about what to do when a possible info breach happens. One of my W-2 forms showed up opened this year (ss# visible) and it looked like it was purposely mangled afterwards - great! So I'm doing the credit freeze now too. :(

Good luck!