I'm sure that you are right, and it should be really easy to figure out where. Also, driving from Halifax to Windsor ON would require several gas fill-ups. Would they have used the cards?
What triggered the request for her mother's maiden name? That usually happens only if there is an alert on the card.
That would have been necessary to access banking information through the bank. If the pair had Loretta's address, phone number, bank cards and her mother's maiden name, they may have been able to change her debit card PIN number. Did the boyfriend text Loretta's mother's maiden name to her phone?