Unless your friend gave the bank permission to answer andy enquiries about her account by the HR Department, I'd be in the bank manager's office raising hell!

The bank is not allowed to discuss any account holder's details without specific written permission from the account holder.

I'd also be filing a complaint with the Qatar Central Bank if this is what has happened.