A tool for managing user identities, credentials, and access across on-premises and cloud environments
Based on the response from Microsoft Support and the documented guidance, once a hacker has changed the security information (email, phone, and other verification methods) and Microsoft has completed an investigation, the account is no longer recoverable.
Key points from the official guidance and similar resolved cases:
- For hacked or compromised Microsoft accounts, the only supported recovery path is:
- Use the sign‑in helper and account recovery form, providing as much accurate information as possible about the account’s prior details and activity.
- This process is automated and is what Support already used in the investigation.
- If the attacker has replaced or removed the security information and the recovery form does not validate ownership, there is no alternative method for Microsoft to restore access. Even Support agents cannot override this, because of security and privacy requirements.
- As Microsoft’s email to the service request states:
- Security settings cannot be modified or restored once they’ve been updated by someone else and the investigation is closed.
- Purchases tied to that account (for example, Minecraft) cannot be moved or recovered; a new purchase on a new account is required.
- OneDrive files under that account are no longer accessible and cannot be decrypted or retrieved by Microsoft.
- The only remaining option is to create and secure a new Microsoft account, then:
- Enable strong security (strong password, up‑to‑date antivirus as described in the hacked‑account guidance, and updated security info).
- Regularly review recent activity using the Security basics page to detect unusual sign‑ins early.
There is no supported technical or support‑driven way to regain access to the compromised account once security info has been changed and recovery attempts have failed.
References:
- How to recover a hacked or compromised Microsoft account
- Hello , welcome to Account help & learning
- What happens if there's an unusual sign-in to your account
- Need help with hacked microsoft account - Microsoft Q&A
- My account got hacked - Microsoft Q&A
- my microsoft account has been compromised - Microsoft Q&A
- How do I send an email to Microsoft about my account being hacked and taken over by <removed> ? - Microsoft Q&A
- Entraron a mi cuenta de microsoft y cambiaron el gmail y contraseña - Microsoft Q&A