In all honesty I would probably still suggest a clean OS install just to be sure no keyloggers or trojans are on the system.

Short of your kid giving out the usernames and passwords, I know of no other way this could happen.