WordPressed hacked?

My wife reported to me that there was a post created under her admin account for her WordPress installation. She doesn’t access her account via a public machine and her password is rather hard to guess.

How can someone gain access and post? Anyway to combat this?