It could also be that she gave you the ITIN she had before she was issued an SSN. So long as she was authorized to work, she should have an SSN and the card will notate that employment is not permitted unless authorized (or something to that effect - can't remember the exact verbiage). Her employer would be obliged to use that for W-2 reporting.
May want to double check with her.
Still an AllStar