According to Microsoft, the only way to recover a compromised (hacked) account is through the official Microsoft website by following the directions provided this support article.
The Microsoft Account Sign-in Helper Tool for hacked accounts is your best option but it can only be used if multifactor authentication was not turned on as explained in the Help with the Microsoft account recovery form support article. You will need to provide enough information to convince them and verify that it is your account. If you have two-step verification turned on, you cannot use the recovery form
Your Microsoft account is linked to other devices (computer, mobile phone) and accounts (products or services) such as Xbox, Office apps, Outlook, Minecraft, Zaeem where you used your Microsoft account.
Note: If you receive a message indicating that your account was disabled Complete the form for Microsoft to review the reason your account was disabled?. Select the option, I am getting an error that someone might be using my account. Once you submit the form please wait for an email reply within 24 to 48 hours.
In most cases, once a hacker changes pertinent information such as the account security verification info (primary email, mobile phone number), the recovery info (alternate email, mobile phone number), security questions, the address that identified the account and password, no one from Microsoft can help recover the account for you if the above method does not work.
Microsoft policy explicitly states in their Contacting support for a Microsoft Account, Account recovery unsuccessful and Help with the Microsoft account recovery form support articles that support agents and advocates are not allowed to send password reset links, access and change account details or make security changes.
Microsoft has stated that "Along with using strong passwords, encryption, security contact information and other technology to keep your content safe and secure,we have strict policies on how our advocates can helpyou with your account.Only you canreset your password andmake security changesto your account".
These policies are implemented to protect all Microsoft Account users from unauthorized access by others including Microsoft support agents in order to ensure security and privacy for all customers. This means some policies prohibit anyone from Microsoft to provide direct assistance for certain issues related to accounts consistent with their commitment to protecting your personal information.