My account was compromised

Question

Hello,

My Microsoft account was compromised by an unauthorized person.

Originally, the account was created and used with my email address, and I am still the original owner of that email account. However, after the account was compromised, the attacker removed my email address from the account as the primary alias.

Because of this:

• My original email is no longer listed as the primary email on the compromised account
• That same email address is now associated with a new Microsoft account that I created later, mistakenly thinking the original account was deleted

Despite this, I can still provide strong ownership proof:

• I know multiple previous passwords used on the compromised account
• I know when and where the account was originally created and used
• The compromised account had a linked Minecraft profile, and my original Minecraft username was erdemuss, which was changed without my consent after the takeover

I have tried the official account recovery form, but:

• There is no way to explain that my original email was removed by the attacker
• There is no field to mention linked services like Minecraft
• I am repeatedly redirected to the same automated process

My question is:

What is the correct way to handle account recovery when the original email alias was removed by the attacker, but the original email owner still has access to that email and knows previous passwords?

Is there any escalation or manual review path in such cases?

Thank you for any guidance Hello,

My Microsoft account was compromised by an unauthorized person.

Originally, the account was created and used with my email address, and I am still the original owner of that email account. However, after the account was compromised, the attacker removed my email address from the account as the primary alias.

Because of this:

• My original email is no longer listed as the primary email on the compromised account
• That same email address is now associated with a new Microsoft account that I created later, mistakenly thinking the original account was deleted

Despite this, I can still provide strong ownership proof:

• I know multiple previous passwords used on the compromised account
• I know when and where the account was originally created and used
• The compromised account had a linked Minecraft profile, and my original Minecraft username was changed without my consent after the takeover

I have tried the official account recovery form, but:

• There is no way to explain that my original email was removed by the attacker
• There is no field to mention linked services like Minecraft
• I am repeatedly redirected to the same automated process

My question is:

What is the correct way to handle account recovery when the original email alias was removed by the attacker, but the original email owner still has access to that email and knows previous passwords?

Is there any escalation or manual review path in such cases?

Thank you for any guidance