Hacker allowed continued access to my account including one drive and pics of my kids

Question

Hacker allowed continued access to my account including one drive and pics of my kids

matthew Holyer 0

Imagine that a hacker gets around your security. I have to make a new account to flag it with you because you cant start chats as its behind a sign in wall- go figure. Then you refuse to freeze the account. Whilst im watching it all unfold account after account using my email address to be unlocked and details changed. With access to all my private files on one drive etc. The fact it was left until investigation finished rather than act on the intel given is a breach of GDPR. You have failed to protect my data, failed to help me when your security failed, and wouldnt even then let me raise a formal complaint. So tell me why is it a tech giant cant help with one of the simple fail safes in a time of critical need? And how do i raise my formal complaint?

Matt Holyer

0 comments

1 answer

Your answer

Answer 1

For hacked or compromised Microsoft consumer accounts (including Outlook.com, OneDrive, and other services tied to a Microsoft account), only the official automated recovery and security processes can be used; front-line support and forum moderators cannot directly freeze, unlock, or manually verify ownership of a consumer account.

When unusual or suspicious sign-in activity is detected, Microsoft may automatically block or restrict the account to protect it. This can include:

Temporarily blocking Outlook.com or the Microsoft account due to unusual sign-in activity.
Requiring additional verification (security codes, MFA) before allowing access.

If an Outlook.com / Microsoft account is blocked because of unusual activity, the supported path is:

Use the Sign-in Helper to start unblocking and recovery: Sign-in Helper.
If the account cannot be unblocked with a security code or password change, follow the guidance in When you can't sign in to your Microsoft account (linked from the unblock article) to reset the password and reach support if needed.
If the account appears hacked or compromised, follow the official “recover a hacked or compromised Microsoft account” guidance and, if necessary, submit the Microsoft Account Recovery form (ACSR) from a trusted device and network, providing as much accurate historical information as possible.

If access is regained, security steps include:

Reviewing the Recent activity page to confirm which sign-ins and changes were not performed by the legitimate owner.
Changing the password and ensuring it is unique and strong.
Adding and verifying multiple security contact methods (phone, alternate email) via Advanced security options, and keeping them up to date.
Enabling another way to sign in or verify identity (for example, additional security info) so recovery is easier if the account is compromised again.
Signing out everywhere and revoking suspicious app permissions, then checking Outlook rules and forwarding settings for malicious rules.

If the automated recovery fails and security info has been replaced by the attacker, the context indicates there is no alternative manual override for consumer accounts; support agents cannot bypass the automated systems or restore access without successful verification through the official flows.

For a formal complaint or escalation about handling of a hacked account, the available route in this context is to:

Use the Sign-in Helper and “When you can’t sign in to your Microsoft account” support path to reach an official support channel (such as chat) once signed in with any Microsoft account.
Clearly describe that the account was compromised, that OneDrive and personal data were exposed, and that recovery or blocking did not work as expected.

References: