Hey there! Nice to meet you!
I'm sorry you are experiencing this.
The only way to recover a hacked account is through the official Microsoft troubleshooter guide:
If the account recovery web form doesn't work, and since the security info has been replaced by the hacker, I'm afraid there is no other working method to recover the Microsoft account, and Microsoft Support cannot help either.
As for the active subscription, please be advised that unless the account owner is able to access the account, subscription cancellation is not possible, and Microsoft personnel cannot retrieve this information.
If you are no longer able to recover your account, you will need to reach out directly to your bank and request to freeze all charges from Microsoft, cancelling the subscription on its renewal in the process.
You may also need to request a new payment method.
Thank you for your understanding.
Best regards,
Darhyl