Anyone know if this sort of thing happens with enterprise users of Microsoft? Exfiltrating user data would create a shitstorm at one of my previous employers.
I wonder what Microsoft would think of all their employee bookmarks being uploaded?
If Microsoft said it didn't happen, why would anyone believe them?
Considering fraud is a crime, yes.
Nobody would go to prison over this. At most it'd be a fine and if the value gained is bigger than the fine they estimate they'll have to pay, they sure as hell would take that chance. Happens all the time. Even more so, since it's literally something (most) MBAs are being taught.