If he obtained the keys legally via Microsoft, but is distributing them in violation of the TOS, that is not a criminal act
It is a criminal act, no less than if someone subscribed to Netflix (legitimiately), then started distributing their content. It both violates the TOS
and is illegal. In some regions willfully violating the TOS and profiting from it may be considered illegal in itself, regardless of what the 'violating' concists of.
it is a violation of their TOS contract, which is a civil issue, not a criminal issue.
Your confusion lies in the assumption that if an incident creates civil liability then its a civil issue at the exclusion of a criminal issue - that is not in the case. In every criminal prosecution I've been involved with (mostly nailing scammers), a mirrored civil liability is also filed. Both civil and criminal for the same action. Another example - I steal your car and in doing so damage it. I am
criminally liable for grand theft auto / equivalent and probably property damage. I am
civilly liable to the car owner / insurance issuer to the value of damage I caused and likely more. One action, civil and criminal liability.
I believe you have a legal right to demand the DMCA notice from Theymos, as it is your right to dispute it in a court of law if you so choose.
I'm not sure about that. Assuming there is one, Theymos would be the recipient and named party on the DMCA notice and not you. Your dispute is with Theymos / the site administration, not the DMCA issuer. Theymos has the right to do whatever he wants on here, you don't.
Of course filing a false claim may put you in civil and criminal liability
*sigh*