Azure Cost Management
A Microsoft offering that enables tracking of cloud usage and expenditures for Azure and other cloud providers.
3,598 questions
URGENT!!! Azure account hacked with unauthorized VMs and charges
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(220.8, 47%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EH%3C/text%3E%3C/svg%3E)
HamimB
5
Reputation points
I recently discovered that my Azure account was hacked and unauthorized subscriptions, VMs, and resource groups were created. Though I deleted all the unauthorized subscriptions and VMs, I have noticed charges of around $3000-$4000 on my account. The first transaction was for $50, which got refunded later. How do I fix this issue and dispute the unauthorized charges?
Azure Cost Management
{count} votes
-
Vinodh247 34,666 Reputation points MVP Volunteer Moderator2023-06-24T14:11:05.46+00:00 Hi,
Thanks for reaching out to Microsoft Q&A.
Suggest you to reach out to microsoft support for your billing related issues. Support for questions related to billing is free in azure and has been included for all azure customers.
https://azure.microsoft.com/en-us/support/legal/faq/#support-overview
To create a support request...
https://azure.microsoft.com/en-us/support/#get-support
Please Upvote and Accept as answer if the reply was helpful, this will be benefitting the other community members who go through the same issue.
-
HamimB 5 Reputation points
2023-06-24T14:16:45.7133333+00:00 I have created a ticket, and they responded with this:
After reviewing your account, our Intelligence team has not found any evidence of suspicious activity or unauthorized access. It appears that both of your subscriptions (xxxxxxxxx-xxxx-xxx and xxxx-xxxxx-xxxxxxxx) were cancelled by you today, the account owner. Therefore, the charges associated with those subscriptions are considered valid.
Please note that as the subscriptions have been cancelled, there will be no further charges moving forward. However, there are charges from the period of 17th to 24th July, and an invoice will be generated on July 9th to reflect those charges accordingly.
To ensure the security of your account, we highly recommend changing your password frequently and implementing multi-factor authentication. These additional security measures can greatly reduce the risk of unauthorized access and account compromise.
If you have any further concerns or require additional assistance, please do not hesitate to reach out to us back.
If there is no further action pending, can I close this service request? Thank you for your understanding.
Really appreciate your precious time and look forward to your reply!
Sign in to comment
Sign in to answer