You are a manager, CYA is not an option for managers.

BSA lawyers are unlikely to come to your door. At 300 USD/hour, those who pay them, prefer that they send a letter first. Not a nice letter - I have read one a few years ago - that must be handled by the company lawyers. If that happens you will have to bargain with them (which they will do).

Before that happens, please realize that for obvious cost and speed reasons, software vendors prefer that you negotiate a settlement with their sales guys rather than through their lawyers. If you need their software, give them a call directly and you may actually end up paying less than if you had to buy everything from the catalog. Oracle has run "operations" like this, usually close to their financial year end (end of May) to help meet their sales targets.

Finally, if this had to go to court, an important factor (not sure in the US though) would be to show that you/the management honestly tried to immediately do something to fix the issue when you became aware of it.
So talk to your boss, do something and make sure you write emails about it.

I am an old (started with Cobol on IBM 3090...) developer that is the lucky owner of a Macbook running MacOSX and a Sony Laptop running Fedora 8. More importantly I am surrounded by people who are plain simple users. I am very impressed with MacOSX: the MacBook is the only computer everyone can really use and - wow - close the lid, the system suspends, open the lid and you are back to where you were. I am still struggling to get my Atheros wireless card restart after suspend on my Fedora/Sony laptop and I have already spent quite a few hours configuring the beast. MacOSX is a very good proof that a nix based system can be used by anyone when painless OS/harwdare coupling is available... and that is good news for Linux. I wish that when my next Fedora installs, it detects that my laptop is XYZ and better auto-configures. I also wish,that instead of trying to run buggy non-secure Windows apps on my Linux box, I could run MacOSX apps. Then I would get my MacBook running Fedora. Sounds feasible, no?