Ref: HYC199170 Yahoo Account Recovery account may forward a password recovery link to the user's Gmail account.In such a case, the recovery email account would have been sentwhich was used by the hacker to answer her Yahoo! email account.Microsoft don't allow account recovery based on simple personal-knowledge questions.
More details: Yahoo Account Recovery
