I was hacked

Because the hacker removed/changed your security info, the account has been put into a 30‑day restricted state, and multiple recovery attempts have now triggered additional protections. During this period, anything that requires a new security verification code (like removing their email, changing 2FA methods, or updating aliases) is intentionally blocked.

Here is what can be done, based on the current state:

1. Stop repeated recovery attempts for now
   Too many recovery attempts in 24 hours will keep triggering blocks. Wait for the temporary lockout to expire before trying again so the system will accept a new recovery attempt.
2. Use the official hacked-account recovery flow only
   When able to try again, use the official hacked/compromised account recovery helper, which is the only supported way to recover a hacked Microsoft account and validate ownership:
   • Go to the hacked-account helper and follow the guided steps: How to recover a hacked or compromised Microsoft account.
3. Understand the 30‑day “security info change is still pending” hold
   When all existing security info is removed and replaced (as the hacker did), Microsoft enforces a 30‑day protection period:
   • During this 30‑day period, the account is in a restricted state and anything that requires a security code (including removing their email, changing password again, turning off 2FA, or changing aliases) is blocked.
   • This is by design to prevent an attacker from permanently locking out the real owner.
   • If 2‑factor verification is turned on, access to sensitive areas (like security settings, parental controls, payment options) is blocked until the 30 days pass or the pending change is canceled from the original security info.
4. If you did not make the security changes
   Since the attacker changed the security info, treat this as a compromised account case and follow the hacked-account guidance above. If notifications are still going to your original security email/phone, use any option provided there to cancel the security info change request so the 30‑day pending state can be stopped.
5. What you can and cannot do during the 30 days (once you get back in)
   If you regain sign-in access while the 30‑day hold is active:
   • You can still sign in and use most Microsoft services (Outlook.com, OneDrive, Xbox, etc.), but
   • You cannot perform actions that require a fresh security code, such as:
     • Updating password again
     • Removing or changing security emails/phone numbers
     • Turning off or changing 2FA methods
     • Updating account aliases or parental controls These restrictions lift only when the 30‑day period ends or if the pending change is canceled from the original security info.
6. If you are completely locked out again
   If the hacker has taken over again and you cannot sign in at all, repeat the hacked-account recovery process after the temporary “too many requests” lockout expires. If the automated recovery ultimately fails, there is no alternate manual override for consumer Microsoft accounts beyond what the hacked-account helper and recovery form provide.
7. Once the 30 days are over and you have access
   As soon as the pending period ends and you can receive verification codes again:
   • Remove any unknown security emails/phone numbers from your Microsoft account security info.
   • Add multiple trusted security methods (another email, phone, and preferably an authenticator app).
   • Turn on 2FA using methods only you control and review sign-in activity and connected apps/devices.

For now, the key steps are: wait out the short-term lockout caused by too many recovery attempts, then use the hacked-account recovery helper; if/when you regain access during the 30‑day hold, use the account but understand that security changes will remain blocked until the hold ends or is canceled via the original security info.

References:

• How to recover a hacked or compromised Microsoft account
• What does “Security info change is still pending” mean?
• Common problems with two-step verification for a work or school account
• My username and password have stopped working
• Hello , welcome to Account help & learning
• Unblock my Outlook.com account
• Cannot Access Microsoft Account After Hacker Changed Email, Advice Needed - Microsoft Q&A
• hello my email was (Moderator note: PII removed)@icloud.com and now its (Moderator note: PII removed)@jerkoffmail.com can please someone help me and the team change it my username in xbox is (Moderator note: PII removed) please help me team and change it - Microsoft Q&A
• My personal hotmail account hacked by hacker with authentication app enabled. - Microsoft Q&A
• Hacker set up continuous draft ransomware email - Microsoft Q&A
• I have seen great advice for deleting the idtienphuoc1 Rule but none for stopping it from re-adding itself - Microsoft Q&A