She probably should not have given you her client files without the clients' permission.
Sounds like she violated a few disclosure rules.
