I'd like to contribute to this thread that I recently encountered the same issue.
I was notified this past weekend of a log-in from a neighboring state, and when I saw similar "Successful Syncs" starting from the end of August, I locked down the account.
The previous password for my account was as strong alphanumeric password unique to the account and less than 2 years old.
The account alias was an @hotmail.com account that I've had since the late 90's. There are only four devices I ever access it from. 2 mobile devices, a work pc, and a personal PC. All those devices have relatively strong security, do not install software
from untrusted sources, and use browsers with current security updates. I believe the last time I used the account for e-mail was around 2001 when the Hotmail e-mail access was shut down due to "inactivity".
Also of note was the fact that until a month ago I had never logged into Outlook.com to use the e-mail functionality of my MS account. I don't know if that factors into it, but I do find it noteworthy. Thankfully because of this I had (hopefully) nothing
of note that could have been sync'd, although I do not know what there were able to access with the few minutes from a browser-based log-in. There were some XBox Live e-mails, spam, and apparently a Uber account someone had mistakenly signed up for using my
e-mail (Uber e-mails were all in Spanish and addressed to someone else's name).
I don't know how long the sync's have been going on for since apparently we only get 28 days of history, but there doesn't appear to be any browser based log-in attempts outside of the one that triggered the alert e-mail. I don't see any failed log-in attempts
in my history for that matter. Since I do not use my account for e-mail nothing should be attempting to sync via IMAP. What's also odd is that the sync attempts were typically 2-5 days apart. The earliest entry shows a successful pop3 sync which I find odd
since according to the Outlook.com settings POP3 is disabled.
None of my other accounts with other services have had any suspicious activity.
I've since change the password, enabled 2fa, and switched the alias as well as disabled logging in for the previous alias.
While I understand MS wants us to use their services, I don't understand why we don't have an option to opt out here. It seems the IMAP sync attempts are a common theme in the thread and other posts here and I feel we should at the very least have the option
to disable IMAP access to our accounts. It feels like we are having a possible security hole vector forced on us.
Did you ever contact support or try and get an answer. I did. Nothing happened. No help, no reason why 2 step didn't work. This is where the gov't needs to step in and investigate. I had no warnings for over a month that my account was synced all
around the world. Finally I got an auto prompt from something saying that my account was most likely compromised. So I looked at security and there they were. Multiple synced all over the world. I guess this is why they only keep 28 days worth. The
support claimed that I installed software from other sites with similar or exact login and passwd. Maybe that happened. I can't say for sure.
So I was trying everything to stop it. Resetting router, changing passwords all. Now, it's a login mess because I walk around with pages of complex login/passwords. The big problem is my account says that I live in the US. I have 2 step verification
always turned on from day 1 it was offered. No warnings.
This 2 step security has helped with gmail. I would get random verification texts with codes from gmail. This told me that my logins were compromised and I quickly changed them. Then it stopped. But with microsoft, never a message no warning at all.
Multiple synced around the world for weeks. Luckily my tons of emails has nothing important. But I am getting non stop scam emails with paypal. I guess that being targeted. But here I am still using MSN.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
