If she didn't 'authorize', is she willing to charge the offender with theft? If not, she's responsible. You are better off hiring a lawyer.