Hello, good day and thanks for your question. Sorry to know about this. Please take note that a compromised account is a complex scenario and once the email and phone number has been changed to a different one then it is at the point that it is unrecoverable (even if 2FA is enabled) and the forum does not have access to user accounts. For this you can go over to this link https://go.microsoft.com/fwlink/?linkid=2196140 and most likely it will be followed by doing the account recovery form which is an automated process that you will need to enter every bit of information that you can remember on the account (if this is unsuccessful, the account cannot be recovered) and you can check out the links below for reference.
There is no guarantee that the Minecraft account can be recovered as well and you can check this with the Minecraft team via https://aka.ms/Minecraft-Support/ to see if they can provide alternatives or options that you can go through.