It sounds like you may have received a phishing call. Microsoft does not typically make unsolicited calls to users regarding security breaches or ask for login information over the phone. Here are some steps you should take:
- Do Not Provide Information: If you haven't already, do not provide any personal information or login credentials to the caller.
- Verify the Call: You can verify if there was indeed any security issue by logging into your Microsoft account directly through the official website. Check for any security alerts or notifications.
- Change Your Password: If you suspect that your account may be compromised, change your password immediately to a strong, unique one.
- Enable Two-Factor Authentication: If you haven't done so already, enable two-factor authentication on your account for added security.
- Report the Call: You can report the phishing attempt to Microsoft through their support channels.
Always be cautious of unsolicited calls and messages claiming to be from Microsoft or any other service provider.