I highly suspect that the figure they're using is inclusive of INVESTIGATIONAL costs, but not legal fees, yet. That's the way the code they're prosecuting him under is written, anyways.
I live in this state, guys, and I gotta tell ya, these folks DO NOT screw around. They're little terriers who will not let go once they come after you. This applies to all GA agencies. I'm in accounting, and I occasionally go through audits. Your best bet is to subtly throw something in front of them which will allow them to pay for two days' time. Then they'll go through the motions for two days and leave. If you're actually clean, God help you, because they'll dig for weeks. I'll manufacture a small mistake rather then fight these turds. Unfortunately, this guy is getting nailed by people with that mindset.
And my best guess is, he's screwed. He probably signed an employment contract with the state that forbids him to use state machines for basically anything without express written permission. I'll bet he didn't get it, and I'll further bet that the state WILL get him. Sucks.
Take it as a lesson, folks. NEVER run any proggy on a work machine unless the company installed it, or you have written permission to do so.