@bert_hubert In your specific example here, Microsoft should be criminally prosecuted in US under CFAA, for using someone else's credentials to log in without authorization.