My Outlook account was hacked on 1/22/2026

Question

My Outlook account was hacked/compromised on 1/22/2026. The hacker downloaded the contact list because I have received several phone calls from people in my contacts saying they are receiving text messages as well as emails asking if it was me or a scammer asking for money.

Answer 1

If your Outlook account has been compromised, it's important to take immediate action to secure it and prevent further issues. Here are the steps you should follow:

1. Change Your Password: Immediately change the password for your Outlook account. Ensure that the new password is strong and unique.
2. Enable Multifactor Authentication (MFA): If you haven't already, enable MFA for your account to add an extra layer of security.
3. Review Account Activity: Check for any suspicious activity in your account, such as unfamiliar sign-ins or changes to your settings.
4. Notify Your Contacts: Inform your contacts that your account was compromised and advise them not to respond to any suspicious messages they may have received from your account.
5. Check for Forwarding Rules: Look for any suspicious inbox rules that may have been set up to forward your emails to unknown addresses. You can do this by using PowerShell commands if you have access to them.
6. Report the Incident: Report the incident to Microsoft and follow their guidelines for compromised accounts.
7. Monitor for Further Issues: Keep an eye on your account and your contacts for any further suspicious activity.

Following these steps can help you regain control of your account and protect your information from further compromise.

---

References:

• Respond to a compromised cloud email account

Answer 2

Hello. I’m sorry this happened to your account; I know situations like this are frustrating and disruptive.

Were you able to recover and secure the account successfully?

Regarding your contacts being called, that activity is consistent with a security breach. As a precaution, it would be advisable to inform your contacts so they are aware of the situation and can ignore or report any unexpected messages or calls that may have come from the compromised account.