HOTMAIL SECURITY - EXTORTIONIST DELETED FILES

James Ballard 0 Reputation points
2026-05-28T16:51:36.8966667+00:00

Hello, My Hotmail/Outlook.com account was recently compromised. During the time the account was accessed without my authorization, items were deleted — specifically, emails in my Sent folder and my Drafts folder. I have since regained control of the account and secured it (password change and security review). I am now trying to recover the deleted messages. I understand Outlook.com retains recoverable deleted items for up to 30 days. The deletions occurred within that window. Could you please help me with the following: 1. Recovering deleted items from the Sent and Drafts folders, including anything purged from the Deleted Items folder by the unauthorized user. 2. Confirming whether items emptied from "Deleted Items" during the compromise can still be restored via the "Recover items deleted from this folder" option, and walking me through it if there are limitations on my account. 3. Advising whether any server-side backup or extended recovery is available given this was the result of a security breach, not normal user deletion. Account details: - Email address: ******@HOTMAIL.COM - Approximate date/time of the compromise: JANUARY 1TH- Approximate date the deletions occurred: UNKNOWN Please let me know what additional verification you need to proceed. Time is a factor given the 30-day retention limit, so a prompt response would be appreciated. Thank you, JAMES BALLARD

Outlook | Web | Outlook.com | Account management, security, and privacy
0 comments No comments

1 answer

Sort by: Oldest
  1. AI answer

    2026-05-28T16:52:03.97+00:00

    Deleted items in Outlook.com and Outlook on the web can be recovered only within the built-in retention limits and only if they are still present in the recoverable stores.

    1. Recovering deleted Sent/Drafts items (including those purged from Deleted Items)

    For Outlook.com / Outlook on the web:

    1. Check Deleted Items and Junk Email first:
      • In the left pane, select Deleted Items.
      • If the folders are hidden, select the Show Navigation Pane button.
      • Select any messages that belong to Sent or Drafts and move them back:
        • Hover over the item and select the checkbox next to it.
        • On the Home tab, select Move, then choose Inbox or another folder, or drag the messages to the desired folder.
      • Repeat the same for the Junk Email folder.
    2. Recover items removed from Deleted Items (Recoverable Items):
      • In the left pane, select the Deleted Items folder.
      • At the top of the message list, select Recover items deleted from this folder.
      • In the Recoverable Items list, select the items to restore (Ctrl+Click for individual items, Shift+Click for a range).
      • Select Restore.
      Where recovered items go:
      • Messages are restored to their original folders when possible (for example, Sent items back to Sent, Drafts back to Drafts). If the original folder no longer exists, messages go to the Inbox.
    3. Whether items emptied from Deleted Items can still be restored

    Outlook.com keeps items recoverable for a limited time:

    • Email is automatically deleted from Deleted Items after 30 days.
    • Items removed from Deleted Items are recoverable for 30 days.
    • Junk email is retained for 30 days before it is automatically deleted.

    Within these limits:

    • Items that were emptied from Deleted Items can still be restored using Recover items deleted from this folder, as long as they remain in the Recoverable Items store and the retention period has not expired.
    • If the deleted messages do not appear in Deleted Items, Junk Email, or the Recoverable Items view, they have likely been permanently removed and cannot be recovered through Outlook.com.
    1. Server-side backup or extended recovery

    From the available information:

    • Outlook.com provides recovery only through the Deleted Items, Junk Email, and Recoverable Items mechanisms with the stated 30‑day limits.
    • If items are no longer present in these locations and the recovery period has expired, they are considered permanently deleted and cannot be restored via Outlook.com.

    For additional assistance (for example, if recovery options are not visible or there are issues using them), use the Outlook.com help and support options described in the same documentation (Help in the menu bar, or the support links provided there) to contact support and report the security incident.


    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.