Depends how big the brand is. If its something like Google etc then they will surely throw in a huge lawsuit.
not at the moment, aniway the password won't be on the website but in other one, as mediafire or megauploadAre you actually sharing passwords? That's probably illegal.
The brand can take the domain any time they want.