hotmail account hacked.

Question

Account has a MFA authenticator on the account.

"Microsoft: ******@hotmail.com"

account password was changed.. MFA was changed. Notified of the change at 4:40am

How can this happen on an account that has an active authenticator?

How did this happen when - to make changes, i need to enter the 6 digit recovery email authenitication?

Answer 1

Hi undisclosed person

I’m really sorry this happened to you. From your description, it sounds like your Hotmail/Microsoft account was taken over, and both the password and the MFA were changed. I understand how alarming this is.

To help me guide you correctly, could you please let me know: Are you still signed in anywhere at all on that original account (old phone, browser, PC, Xbox, etc.)?

Please kindly note that this is a public user-to-user forum, I do not have the ability, tools to unblock, recover accounts or bypass security. Only Microsoft’s official recovery process can restore access.

1, If you're still have access anywhere, please secure your Microsoft account immediately:

• Go to: https://account.microsoft.com/security > Manage how I sign in
• Remove any unfamiliar sign‑in methods you don’t recognize and add back only methods you control
• Check the list of devices associated with your account
• If you notice anything unusual, change to a strong password and Sign out everywhere
• Turn on Two-step verification: How to use two-step verification with your Microsoft account - Microsoft Support
• Check Recent activity: https://account.microsoft.com/activity and choose This wasn’t me/ Secure your account for anything you don’t recognize
• If you see "Security info change is still pending" and you did not make that change, use the "let us know" option on that page. You can see What does “Security info change is still pending” mean? - Microsoft Support

2, If you are not signed in anywhere, please kindly follow Microsoft’s official hacked-account recovery flow: How to recover a hacked or compromised Microsoft account - Microsoft Support

3, If the original account is still recognized, you can try filling out the Microsoft account recovery form with maximum details:

• Go to: https://account.live.com/acsr
• Enter your original email and an alternate email where Microsoft can contact you.
• Provide as many accurate details as possible, such as old passwords, frequent contacts/subject lines and submit from a familiar device/location.
• Wait 24–72 hours for a response. You may refine and resubmit up to twice per day.   
• Please see this official guide to help you fill out the form more accurately: Help with the Microsoft account recovery form - Microsoft Support

4, Contact Microsoft Support directly

You can reach out directly to the Microsoft Support team for further assistance:

• Go to Contact - Microsoft Support
• Type a brief description of your issue in the search box.    
• Click "Get Help", then scroll to the bottom and select "Contact Support”.
• Choose the appropriate Products & Services/ Category.
• Look for and select "Chat with a support agent in your web browser" (during business hours) or a similar callback option (if available). Explain your situation clearly.

Please feel free to let me know how it goes. I truly appreciate your time and understanding.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.