Microsoft Account Compromised – Unauthorized Access

Question

Microsoft Account Compromised – Unauthorized Access

Tome Meireles 10

My account was compromised by an unauthorized party who changed the email and security information without my consent. I no longer have access to the original email and could not receive notifications of these changes.

I am the original owner of this account and have been using it for services such as Minecraft (username: [username]). I can provide previous passwords, approximate account creation date, usual location in Portugal, and devices used to access the account.

I kindly request that my ownership be verified and access restored. I am willing to provide any additional verification required to prove that I am the rightful owner.

0 comments

1 answer

Your answer

Answer 1

For a hacked or compromised personal Microsoft account where the email and security info were changed, only the official self-service recovery process can be used; community members and general support cannot manually verify identity or restore access.

Follow these steps:

Use the official hacked/compromised account guide
- Go to How to recover a hacked or compromised Microsoft account and follow the workflow. The troubleshooter will ask for the account identifier (email/phone) and then guide through self-help or options to contact an agent where available.
- Article: How to recover a hacked or compromised Microsoft account.
Submit the Microsoft Account Recovery form (ACSR)
- Use the account recovery form at https://account.live.com/acsr (as described in the Q&A references) for the Microsoft account that was taken over.
- Provide:
  - The hacked Microsoft account sign-in (original email/alias, if still known).
  - A different, working contact email where Microsoft can reach out.
  - As much accurate detail as possible: previous passwords, approximate creation date, typical sign-in country/region (Portugal), devices used, and examples of contacts or subject lines, as suggested in the Q&A guidance.
- Submit the form from a device and network commonly used with the account to improve the automated checks.
If the form says the account does not exist or is declined
- As shown in similar Q&A cases, if the recovery form reports that the account does not exist or repeatedly fails, and the attacker has replaced the security info, there is no alternative manual override for consumer Microsoft accounts.
- In that situation, support agents cannot bypass the automated system or restore access.
If access is recovered
- Immediately:
  - Run a full malware scan on all devices used with the account before changing passwords, as recommended.
  - Change the password to a strong one.
  - Review and fix account settings such as connected accounts, forwarding, and automatic replies.
  - Enable and enforce two-step verification / multifactor authentication (MFA) and update all security info.
Minecraft and other purchases
- If the Microsoft account cannot be recovered via the official process, contact Minecraft Support separately about Minecraft Java/Bedrock entitlements, as suggested in the referenced Q&A, to see if they can offer any alternative options for game access.

If the automated recovery ultimately fails, there is no supported method to restore the compromised Microsoft account, even with proof such as purchase history or prior passwords.

References: