My Microsoft account was hacked and all recovery information was changed

Because the attacker changed the password and removed the recovery email and phone number, recovery is only possible through the official hacked-account and recovery form flows. If those fail, the account (and its Minecraft license) cannot be recovered.

Follow these steps in order:

1. Use the hacked/compromised account troubleshooter
   • Go to How to recover a hacked or compromised Microsoft account and start the Sign-in Helper: Start.
   • Enter the hacked Microsoft account’s email or phone. The tool will either show self-help steps or options to talk to an agent.
2. Submit the Microsoft account recovery form with maximum detail
   • Before filling the form, gather as much information as possible about the hacked account, as described in Help with the Microsoft account recovery form:
     • Old passwords used on the account.
     • Xbox gamertag linked to the account.
     • Connected email addresses.
     • Any Outlook/Hotmail contacts and exact email subject lines (if used with Outlook.com).
     • Any Skype IDs or contacts (if used with Skype).
     • Xbox console hardware ID that was frequently used (if applicable).
   • Use a device and location previously used to sign in to that account, if possible, to improve verification.
   • Ensure there is a separate, working email address available; this is where Microsoft will send the recovery result and instructions.
   • Fill in the recovery form here: Account recovery form.
   • Answer every question you can; guessing is allowed and wrong answers do not count against the request.
3. Handle the “email reused / redirect to new account” issue
   • When the email address has been reused to create a new account, the system may treat that as a different account.
   • Still submit the recovery form specifically for the original hacked Microsoft account, using all historical details (old passwords, Xbox gamertag, connected emails, purchase history, etc.). These details are what the automated system uses to distinguish the original account from the new one.
4. After submitting the form
   • Microsoft will send the result to the working email within 24 hours.
   • If the account is verified, instructions to sign back in will be sent to that working email.
   • If the account is not verified, it is allowed to retry up to two times per day. Before each retry, add any additional details that were missed previously.
5. If recovery continues to fail
   • If the recovery form and hacked-account flow both fail, and the attacker has fully replaced the security info, there is no other supported method to regain access. Microsoft Support and community forums cannot override the automated verification or manually restore access.
   • In that case, the Microsoft account and its attached Minecraft license are effectively unrecoverable. For Minecraft-specific options, contact the Minecraft team separately as suggested in the referenced Q&A, but there is no guarantee of license recovery.
6. After regaining access (if successful)
   • Immediately run a malware/antivirus scan on all PCs used with the account.
   • Change the password to a strong, unique one.
   • Review security info and remove any attacker-added aliases or methods; add safer verification methods (such as Microsoft Authenticator) and multiple recovery options.
   • Review recent activity and mailbox settings (forwarding, automatic replies, connected accounts) for any malicious changes.

References:

• Help with the Microsoft account recovery form
• How to recover a hacked or compromised Microsoft account
• Hello , welcome to Account help & learning
• My account got hacked. - Microsoft Q&A
• My account got hacked - Microsoft Q&A
• Need help with hacked microsoft account - Microsoft Q&A
• my microsoft account has been compromised - Microsoft Q&A
• How do I send an email to Microsoft about my account being hacked and taken over by <removed> ? - Microsoft Q&A