She was using government property at her workplace to do these things. If I was using my work computer and network to do improper things online, I’d expect my employer to be contacted about it.
The difference here is that she was basically stuck in the office for months. But that doesn’t make it OK.
Sure but can't the police handle the identity theft accusations? Which will of course end up involving her work so they'd find out either way and will likely respond in kind.
Why bring the FTC and NASA Inspector General's Office... other than to inflict the maximum amount of punishment?
The difference here is that she was basically stuck in the office for months. But that doesn’t make it OK.