You mentioned that it has been a year since you last logged in to your Microsoft account. It is possible that during that time, the hacker was able to request the 30-day security info change and delete the notification from your account.
If not, there's a chance you received it but overlooked it during that one‑year period.
“Please note that this is a public forum, I will be responding you in short period of time and regret for a delay in response. As I am merely a fellow user trying to provide insight and information that may be helpful to others.”
Best Regards,
Darhyl