Is your daughter certain her husband's credit/debit card info hasn't been stolen somewhere? Or even a card taken out in her husband's name (ID theft)? Thieves have been doing this for quite a while. Get your data, get a card in your name, have stuff shipped to your address, pick it up from your property before you get home. Sounds like she got it before they did. Even if it was in her name, was your husband's information used to purchase it (again, back to ID theft).
I'd recommend they get credit reports on themselves.
She called Amazon and they said that the package was sent by someone named Michelle Young and it wasn’t on her Prime account. I guess she should check her credit cards, though.