A criminal complaint revealed that Microsoft's telemetry can track users by correlating a Windows device ID with specific online activities, such as the creation of an ngrok account. Although readers initially suspected the third-party software was harvesting the machine identifier, an ngrok employee clarified that Microsoft's own data linked the suspect's device to the account's creation time despite the use of a VPN. This discovery highlights the significant privacy implications of operating system vendors correlating local device identifiers with remote network activity.