Jurisdiction

Legal challenges mount over Microsoft’s Cloud practices

The UK’s Competition and Markets Authority (CMA) has postponed the release of provisional findings from its cloud computing investigation to January 2025, according to an updated timeline. Despite this delay, the final report remains on schedule for July 2025. The investigation targets potential anti-competitive practices in a market heavily influenced by Amazon Web Services, Microsoft Azure, and Google Cloud Platform.

This inquiry follows concerns raised by the UK media regulator Ofcom, which highlighted issues such as restrictive data transfer fees and volume discounts that might prevent customers from switching providers or using multiple suppliers. Microsoft’s software licensing terms, especially concerning its Windows Server and Microsoft 365 products, are also under scrutiny for potentially disadvantaging competitors.

Adding to Microsoft’s challenges, a legal claim filed at the UK Competition Appeal Tribunal accuses the company of imposing punitive licensing policies that could cost British businesses over £1B in damages. Meanwhile, the US Federal Trade Commission is conducting a parallel antitrust investigation, broadening the global focus on the tech giant’s market practices.

The CMA’s findings and potential legal outcomes could reshape the dynamics of cloud computing, a vital sector for businesses and governments worldwide.

UK approves Vodafone and Three merger with conditions

The UK Competition and Markets Authority (CMA) has approved the merger between Vodafone and Three, two of the country’s largest telecom operators, in a $19 billion deal. The merger, which has faced intense scrutiny, was initially investigated due to concerns over potential price hikes, reduced services, and lower investments in mobile networks. However, the CMA approved the deal with conditions to address these concerns, including commitments for significant investment in a nationwide 5G network.

The companies must also cap mobile tariffs for the next three years and maintain contractual terms for mobile virtual network operators (MVNOs) during that period. The CMA’s decision marks a shift from previous cases where “4-3” mergers in the telecom sector were allowed only with significant structural changes. This approval is seen as a pragmatic approach, with the CMA confident that competition will be strengthened by a well-resourced trio of mobile operators in the UK.

Vodafone’s CEO, Margherita Della Valle, welcomed the approval, emphasising the benefits for consumers and businesses, including wider coverage and faster mobile speeds. The merger is expected to accelerate the UK’s position in European telecommunications, with a combined investment in the sector. The CMA and Ofcom will oversee the implementation of the agreed measures to ensure competition is maintained.

Europol takes down encrypted messaging service ‘designed by criminals for criminals’

European authorities have dismantled a sophisticated encrypted messaging app called Matrix, allegedly designed ‘by criminals for criminals,’ according to Europol. Discovered on the phone of a suspect involved in the 2021 murder of a Dutch journalist, Matrix was accessible by invitation only, hosted on 40 servers across multiple countries, and provided features like anonymous internet access, video calls, and transaction tracking. Subscription costs ranged from €1,300 to €1,600 for six months.

During a three-month investigation, authorities intercepted and analysed over 2.3 million messages exchanged on the platform in 33 languages. These communications revealed links to major crimes, including international drug and arms trafficking, as well as money laundering. The operation, led by law enforcement in the Netherlands, France, Lithuania, Italy, and Spain, resulted in the seizure of €145,000 in cash and half a million euros in cryptocurrency.

This takedown follows similar actions against encrypted platforms such as Ghost, Exclu, and EncroChat, highlighting a trend of criminals adopting smaller, more complex communication services. Europol emphasised that these platforms are increasingly used for illicit activities, while Dutch authorities warned that serious criminals ‘wrongly believe they can still operate in secret.’

Arrests were made in France and Spain, while main servers were seized in France and Germany, signalling an intensified effort to disrupt organised crime networks.

Microsoft faces UK legal action over alleged cloud licence abuses

Microsoft is facing a £1 billion legal claim in the UK, alleging it imposed unfair licensing fees on businesses using rival cloud services like Amazon, Google, and Alibaba. The case, brought by competition lawyer Maria Luisa Stasi, accuses Microsoft of deterring customers from using competing cloud platforms by inflating fees for its Windows Server software.

The licensing changes, introduced in 2020, reportedly incentivised customers to choose Microsoft’s Azure platform, raising concerns about restricted competition. Britain’s competition watchdog is also scrutinising Microsoft’s cloud practices as part of a broader industry investigation.

The United States Federal Trade Commission has similarly launched an antitrust probe into Microsoft’s cloud computing and software licensing, investigating potential market abuse. Microsoft’s actions have sparked global attention over its influence in the cloud sector, which is dominated by Microsoft, Amazon, and Google.

Celsius founder pleads guilty to fraud, facing up to 30 years for scheme in cryptocurrency crackdown

Alex Mashinsky, the founder of Celsius Network, has pleaded guilty to commodities fraud and manipulating the value of his company’s token, CEL. The former CEO of the cryptocurrency lender admitted in court to misleading investors and providing false reassurances about Celsius’ regulatory compliance. He also acknowledged selling his CEL holdings without disclosing this to customers.

The plea deal follows Mashinsky’s indictment on seven counts of fraud, conspiracy, and market manipulation. Federal prosecutors revealed he profited $42 million from selling CEL at inflated prices, while customers were left with substantial losses when Celsius filed for bankruptcy in 2022. Mashinsky faces up to 30 years in prison under the terms of the agreement and will be sentenced in April 2025.

Founded in 2017, Celsius gained popularity by offering high returns on cryptocurrency deposits, but its bankruptcy left many customers unable to access funds. The company has since emerged from bankruptcy and shifted its focus to Bitcoin mining. Mashinsky joins a growing list of crypto executives charged with fraud, including FTX founder Sam Bankman-Fried, who was sentenced to 25 years in prison earlier this year.

Mashinsky’s defence lawyer highlighted the decision to plead guilty as a step toward accountability, saying it allows all parties to move forward. Federal prosecutors continue investigating fraud in the cryptocurrency industry as digital asset prices recover.

Dutch regulator begins handling DSA complaints

The Netherlands Authority for Consumers and Markets (ACM) is receiving complaints related to the Digital Services Act (DSA), but it currently lacks formal authority to act until the law is fully transposed by the national parliament. The DSA, which aims to regulate large online platforms and protect users, became applicable in February 2024, but enforcement will only begin once the Netherlands passes the necessary implementing legislation.

Martijn Snoep, Chairman of the ACM, highlighted that enforcement under the DSA is expected to lead to clashes between regulators and Big Tech leaders, although he plans to approach this more neutrally. The ACM focuses on three main areas: ensuring platforms comply with basic rules, protecting minors online, and tackling irresponsible hosting providers. While the Dutch regulator is investigating non-compliant companies, it cannot yet take enforcement actions against foreign firms or force them to share information.

The ACM has received 227 complaints, mostly regarding companies based outside the Netherlands, and while it can redirect these to other regulators, it cannot yet act on them. Snoep emphasised that, despite challenges, the Netherlands is preparing to enhance its regulatory capacity to ensure fair compliance, though he prefers waiting before introducing new legislation on emerging issues like online child safety or advertising.

Despite the slow start, the ACM is confident that over time, as the industry adapts to a more regulated environment, digital platforms will gradually become more compliant with the DSA’s requirements.

Russian court hands life sentence to Hydra founder

The founder of Hydra, a notorious darknet marketplace and crypto mixing service has been sentenced to life in prison by a Russian court. Stanislav Moiseev and 15 accomplices were convicted of running a criminal network that handled over $5 billion in cryptocurrency transactions, while also producing and selling illegal drugs and psychotropic substances. Moiseev was also fined $38,100, with additional fines imposed on his accomplices.

Hydra, which was dismantled in 2022 by German authorities, accounted for 80% of all darknet-related cryptocurrency transactions at its peak. It sold stolen credit card data, counterfeit currencies, and fake identity documents. Despite its shutdown, Hydra’s criminal operations left a significant mark, with its user base reportedly including 17 million customers and 19,000 vendors.

The sentences include prison terms ranging from eight to 23 years for Moiseev’s accomplices, alongside the seizure of properties, vehicles, and nearly a ton of drugs. Russian officials have been investigating Hydra since 2016, but the convictions are subject to appeal.

SEC and ICBC unit reach settlement after ransomware attack

The SEC has settled allegations against ICBC Financial Services, a US-based unit of the Industrial and Commercial Bank of China, following a ransomware attack in November 2023.

The attack disrupted the company’s operations, including its ability to maintain accurate records and notify customers of securities-related transactions for nearly four months.

Regulators cited the firm’s lack of preparation for a significant cybersecurity incident as a factor leading to the breach. Despite this, the SEC refrained from imposing a civil fine, crediting the company’s meaningful cooperation and extensive remedial efforts in addressing the situation.

ICBC Financial Services neither admitted nor denied any wrongdoing in the settlement. The agreement highlights the SEC’s focus on ensuring firms take proactive steps to strengthen their cybersecurity defences.

Wise implements anti-money laundering controls after regulatory review

Wise, the British money transfer firm, has enacted a formal remediation plan following a regulatory review by the Belgian National Bank (BNB) regarding anti-money laundering compliance. In early 2022, the BNB identified that Wise lacked proof of address for hundreds of thousands of customers.

The company worked closely with the regulator to address the issues, implementing a plan requiring customers to provide proof of address within weeks. Non-compliant accounts were frozen as part of the measures. Wise stated it has fully resolved the concerns.

Founded in 2011, Wise aims to simplify international money transfers and is listed on the London Stock Exchange. The BNB declined to comment further on the matter.

Indian police probe Starlink in maritime drug bust

Indian police are investigating how a Starlink satellite internet device was used in a massive drug smuggling operation. Officers in the Andaman and Nicobar Islands seized over 6,000 kilograms of methamphetamine, worth an estimated $4.25 billion, from a Myanmar vessel last week. Six Myanmar nationals were detained in what has become the largest drug bust in the region’s history.

Authorities revealed the smugglers relied on a Starlink device to navigate the deep seas and evade detection. Starlink, which provides internet coverage in international waters, has yet to formally launch in India, pending government approvals. Investigators aim to trace the device’s purchase and usage history to uncover potential links to smuggling networks.

Meth trafficking via maritime routes has surged across Asia, with record seizures reported in 2023. Police in India are now probing connections to both local and international criminal syndicates in this case.