Florida-Based Software Distributor Jailed 22 Months for Trafficking Microsoft COA Labels

When software authentication labels are abused, the consequences can be severe, as one Florida distributor just learned. Heidi Richards, 52, of Brandon, has been sentenced to 22 months in federal prison and ordered to pay a $50,000 fine after a jury found her guilty of conspiring to traffic in illicit Microsoft Certificate of Authenticity (COA) labels (via Bleeping Computer).

How the scheme worked and what it means for software security

Richards, operating under the name Trinity Software Distribution, reportedly paid co-conspirators millions of dollars for thousands of genuine Microsoft COA labels at prices well below the retail cost of the software they were meant to accompany. She and her employees harvested the product key codes from the labels and sold them in bulk to customers, which is strictly prohibited under federal law.

COA labels are important for verifying genuine Microsoft software. They carry security features designed to prevent counterfeiting and are meant to be sold only with the software or hardware they authenticate. Selling the labels separately is illegal and poses a risk to software integrity.

The case was investigated by Homeland Security Investigations’ Kansas City Field Office and prosecuted by Assistant U.S. Attorney Risha Asokan and Trial Attorney Jared Hosid of the Justice Department’s Computer Crime & Intellectual Property Section (CCIPS).

For the uninitiated, CCIPS handles cybercrime cases in collaboration with domestic and international law enforcement agencies. Since 2020, the section has secured convictions of over 180 cybercriminals and obtained court orders for the return of more than $350 million to victims.

The ruling shows the federal government is serious about cracking down on software piracy and cybercrime. Richards’ prison term and fine remind us that even minor components of software licensing, like COA labels, are legally protected.

For consumers and businesses, this is an eyeopening case to be vigilant about purchasing software from unauthorized sellers. What may seem like a harmless shortcut could carry significant legal and financial consequences.