Just out of curiosity how do you know who did this? I don't think hiring a lawyer at this point in time is the best choice of action. If the person in question did this on their own time and with their own computer there isn't anything that the company could have done to avoid it. Their only option is to hold a meeting to let everyone know that harrassment of any type will not be tolerated.