I assumed that your friend lost his coin maybe because when he turned online which hackers have detected his wallet or he have been sharing his private keys in Facebook messenger. In my own opinion, the best thing to protect your offline wallet is avoid going online when you are not using your wallet and stop sending or sharing your private keys in social media sites because it is vulnerable in hackers.