Did I buy a stolen unit?

I bought an “open box” Max BR1 Mini. Powered it up, but couldn’t access the wi-fi AP, even after doing a factory reset. Gained access through the LAN port, and when I got into the dashboard, I saw existing wi-fi users (again, this is after doing the factory reset).

In the same window, I saw a note stating the wi-fi access was administered by “InControl”, so I clicked on that link. The tab that opened was labeled “Stolen”, but other than that, the unit worked well.

Clearly, there was notice for further inquiry, so I registered for an InControl account. Sure enough, when I tried to add the device to my organization, I was told the device belongs to another organization.

My question is, how might I go about confirming the device status? If it’s actually stolen, I’d like to get it back to its rightful owner, not to mention getting a refund from the reseller who sold it to me.