The phone would not just randomly do something like this on its own. You have to manually wipe (unless someone else can obtain remote access - like on an exchange server, for example) OR as you said, she received the update with the phone being in her pocket. Her leg or something must have hit...