It's definitely enough to ask Google, and possibly his bank or credit card company (to see if he bought any servers recently).