Hi Dave,
Who is actually "suing" your friend - HSBC or a collection agency? My guess is if the DOLD is 2002, it's actually a collection agency suing her because HSBC has already "charged off" the debt and sold the bad debt portfolio to a collection agency.
A trick that some (unscrupulous) CAs use to get a person to pay up is to send a fake summons or a notice with a fake docket number.
Here is what you need to do:
1) Go to the courthouse or call the courthouse where the lawsuit was allegedly filed. You should see that on the summons, along with a docket number. Find out if this is legitimate.
a) If this is a valid suit, your friend needs to see a consumer attorney ASAP to represent her and create a plan of attack for her defense.
Regardless of whether the lawsuit is fake or real, your friend needs to do the following ASAP:
1) Send a DV (CMRRR) to the group that's suing her (HSBC or a collection agency). See HappyDays's post for an example letter.
2) Send a dispute to the CRAs who are reporting the debt as "not mine".
3) Contact HSBC to get the full information about this debt. If HSBC still has the account on record, they will tell your friend about the account, such as: the amount owed, the date of last payment, the amount of the last payment, and which company purchased the debt. Sometimes, the original creditor has absolutely no record of the account, which will be lucky for your friend. Get all the information from HSBC in writing, especially if they can't find the account information!
4) If your friend suspects that her identity was stolen, she will need to do the following:
a) File a police report.
HTH