A friend of me was hacked / RVN was sent without his approval

He mines RVN on a pc and has a wallet installed on that same pc. Recently about 400 raven was sent to an ravencoin adress without his knowledge.

How is this possible? What ways are there to do this kind of 'hack'?