My Microsoft account was Hacked

Question

My account was Hacked

Since February 3rd, I have been unable to sign in to my Microsoft account. That day, when I turned on my PC and opened the Xbox app, I was suddenly logged out. When I tried to sign in again, the system reported that the account did not exist.

This account was previously linked to my PC, so I attempted to sign in using Windows Hello. However, access was denied, and a different recovery email address appeared. One that does not belong to me.

It is clear that unauthorized access occurred and that the attacker changed the security information (password, recovery email, and verification methods), completely locking me out of my own account.

I have already contacted Microsoft Support and submitted recovery requests, but they were rejected. Despite this, I have strong proof of ownership:

Years of purchase confirmation emails and subscriptions

The account was used on my personal Windows PC

Links to other services such as Xbox Family, Steam, Epic Games, and Discord

Access to a Microsoft family group where this account was previously the administrator

This account is extremely important to me, as it contains years of data, purchases, and subscriptions.

Is there any additional escalation path or manual review process available for cases where account security information was maliciously changed?

Any guidance would be greatly appreciated.

Answer 1

Hi Gabriel Alejandro Hoyo Granado,

Welcome to the Microsoft Q&A forum.

I can see that there is already a Q&A Assist answer in the thread. Its general guidance is appropriate for compromised Microsoft accounts, especially the suggestion to use the official account recovery process.

However, based on the details you shared, there is an important limitation to clarify. Since the attacker has changed your email address and security information (recovery email, verification methods, and possibly Windows Hello linkage), the automated recovery options - such as the standard recovery form - will no longer be effective. Once the original security information has been replaced, those automated systems are unable to verify ownership, even if you have strong historical proof.

Please also note that as a user‑to‑user support forum, there is no ability here to manually review accounts, restore access, or override recovery decisions. That level of review can only be done by supported channels.

Because of this, the remaining and most appropriate next step is to contact Microsoft Support via live chat so your account can be reviewed directly by a support agent. Please follow the steps below to start a live chat session with Microsoft Support:

1, Visit the Microsoft Support contact page: Contact - Microsoft Support  

2, In the search bar provided on the page, type "Account recovery" and press Enter.  

3, Click on the "Get Help" button that appears.  

4, Scroll down the page until you see and click on the "Contact Support" option.  

5, When prompted to select your product or service, choose "Other Products".  

6, For the category, choose "Manage account security".  

7, Look for and click on "Chat with a support agent in your web browser".  

8, Confirm your personal email when prompted - this is the email Microsoft will use to communicate with you during and after the support session.  

9, When connected, clearly explain your situation. Be concise but include all relevant details.

I hope this helps clarify why the automated recovery paths are not working and points you to the correct next step for further assistance.

Answer 2

It sounds like your Microsoft account has been compromised, and you're facing significant challenges in regaining access. Here are some steps you can take to address this situation:

1. Account Recovery: Since you have strong proof of ownership, you should continue to use the official Microsoft account recovery form. Provide as much detail as possible, including your purchase history, subscriptions, and any other relevant information that can help verify your identity.
2. Contact Microsoft Support: If your recovery requests have been rejected, try reaching out to Microsoft Support again. Explain your situation clearly and emphasize the evidence you have regarding your ownership of the account. You may want to ask if there is a way to escalate your case for a manual review.
3. Check for Updates: Keep an eye on any communications from Microsoft regarding your recovery requests. Sometimes, additional information or verification steps may be required.
4. Inform Your Contacts: If you suspect that your account may be used for malicious purposes, inform your contacts about the situation to prevent them from falling victim to any potential scams.
5. Monitor for Activity: If you regain access, monitor your account activity closely for any unauthorized changes or suspicious behavior.

Unfortunately, there is no guaranteed way to recover a hacked account, especially if the security information has been changed by the attacker. However, persistence in following up with Microsoft Support and providing detailed evidence of your ownership may increase your chances of recovery.

---

References:

• Hacked account - Microsoft Q&A
• My personal hotmail account hacked by hacker with authentication app enabled. - Microsoft Q&A