Got an email from oracle recently that said (paraphrased):
"We saw downloads for virtual box from your IP address but no licenses for your organization. Please let us know when is a suitable time to meet to explain the benefits of being licensed correctly."