I have been unable to access my Microsoft account info page for years, finally got confirmation that it has been hacked last night, what do I do?

Question

As the title states, I have been unable to access my microsoft account info page for a very long time, I have not really cared too much about it, though, because I have been able to log into my authenticator app and windows fine and I don't use any of the office products.

My sympoms are that I absolutely cannot access the "manage my account" or "account info" page, I have tried multiple different browsers, clearing cookies, different OSs, on an apple device, on an android device, pretty much everything, it either

1. says: Try again later, We can't sign you in right now. Please try again later
2. just loops me back to the sign in page after entering in my email and password, like i never tried to sign in in the first place.

I've talked with human support before but it's always "wait 48 hours", "you account looks fine", in the Microsoft password recovery tool where you go through and answer a bunch of questions it says that there's nothing wrong with my account.

I figured I'd try again last night, resetting my password, seeing if there was any other way to access my account info. No luck.

I wake up this morning though to multiple "Unusual sign-in activity" emails (checked in my authenticator app, there were log ins from london, the middle east, etc) and a "Security info replacement" email saying that someone is trying to replace my email with an email that looks like a bunch of random characters @ lumina-te.top.

I clicked to remove the address, and double checked that all the other info was correct, my phone number and recovery account are still my own.

I have reset my password again, like I have in the past, but I don't know what to do from here. I still cannot get to my account info page to manage my account. And it does not appear to log out any of the other people who may have access to my account.

Thank you for any help with this

---

Moved from Microsoft 365 and Office | Access | Other | Windows

Answer 1

Could you please try instead to log in Xbox.com see if the results are the same, if you manage to log in there, also, you mentioned that you attempted different devices, but have you tried to use a different network like a mobile hotspot?

Answer 2

Hi! The password change is a good start. You should also check that your contact methods remain the same here:

https://account.live.com/proofs/manage/additional

After that, close all your open sessions. You will need to log back in to all your devices, but it's safer this way:

https://account.live.com/proofs/manage/additional

After this, please review the next link to see if any apps that you don’t know have access to your account and delete them:

https://microsoft.com/consent

Finally, do this in Outlook from Edge:

Sign in to Outlook.com

Click on the gear icon (Settings) in the upper right corner.

Look for and open Mail settings.

Go to the Rules section and check if there are any rules you didn’t create. If there are any suspicious rules (for example: “forward everything to @.___” or “move everything to Deleted”), delete them immediately.

Also check in Forwarding and IMAP and make sure there are no addresses added. If there is one and it’s not yours, remove the forwarding.