Microsoft Sued for Allegedly Misusing Stolen Passwords

A security firm has filed a lawsuit against Microsoft, alleging that the company misused a database of stolen passwords

The dispute between Hold Security and Microsoft reportedly soured around 2020 after the parties renewed their relationship. Hold alleges that Microsoft attempted to purchase historical account credentials, which Hold was unable to pursue due to ethical and legal reasons. As a result, Microsoft allegedly commandeered the data and allowed third parties to use it via the Microsoft Edge web browser. Hold also claims that Microsoft retaliated against them, resulting in a significant loss of business and damaging their reputation.

The lawsuit highlights the importance of proper data handling and adherence to contractual agreements in the cybersecurity and technology industry. As the case unfolds, the outcome will shed light on the responsibilities of tech companies when it comes to protecting personal data and respecting the terms of their agreements with cybersecurity firms like Hold Security.