It doesn't look to me like the detention time involved here was computed from the damages. The two issues are orthogonal. We appear to agree on this point.
They are not orthogonal. Amount of estimated damages differentiates between kinds of theft (petty larceny vs grand) and is pretty much directly used to calculate imprisonnement duration in hacking cases. Some 30000 USD/year, IIRC. That's why companies always inflate their damage reports. Severe abuse of justice for the defendant and the company risks pretty much nothing.
Companies "always" inflate their damage reports... but in this instance, the number cited came directly from their upstream billing. Can you square that circle for me?
In non-tech cases, my impression is that upstream billing isn't taken as solid proof of the amount of damage incurred. For example you might have a very expensive contract with a visits-your-house personal mechanic who you've agreed will be your exclusive car-repairer. Thus when you're hit in an accident, you automatically incur a large bill of $X, due to your pre-agreed subscription with the mechanic. But for either civil or criminal damage computation, a court would normally determine how much damage was caused by looking at what the repair cost would've been with a "normal" mechanic at prevailing rates instead.