Someone specific? If so, they probably used some "sneaky" way of installing a malicious script.
If they mean everyone on the server, they would need administrative access to the server, and this would be only for traffic sent over the server (which excludes DCC Chat).
There are many non-mIRC ways of monitoring network traffic, under the "proper conditions".
