Microsoft Account Hacked 4 Months Ago, Recovery Forms Receive No Response

I am trying to recover a Microsoft account that was compromised approximately four months ago, around February 2026.

Microsoft account: ******@gmail.com

I still have access to the original Gmail account associated with the Microsoft account.

The attacker changed the recovery email, changed the recovery phone number, and added their own authenticator app. When I try to recover the account, Microsoft shows a recovery email ending in a polosmail.com address that I do not recognize.

The attacker enabled two-factor authentication using their own authenticator app, which prevents me from signing in even though I still know the original password and still have access to the original Gmail account associated with the Microsoft account.

Account information I know:

Xbox gamertag: HEROBRINE32936

Minecraft Bedrock username: HEROBRINE32936

Minecraft Java username was originally HEROBRINE32936 and was later changed to Ahan_Kaushik and then again to Enderrite.

I still have access to a phone that was regularly used to log into Minecraft with this account

I know the password that was used on the account before it was compromised. There was only one password ever used for this Microsoft account.

The account contains years of history and purchases. Minecraft was purchased on this account years ago, and I later purchased Java and Bedrock for PC through the same account.

Over the past four months I have submitted the account recovery form many times. Most recently I completed the full recovery questionnaire, including personal information, password history, Xbox information, and purchase information. The form ended with a confirmation stating that my information had been submitted and that I would receive an email regarding the review.

However, I have still not received any response regarding the recovery request. I receive Microsoft verification codes successfully, so the contact email is able to receive Microsoft emails. The only emails I receive are verification codes. I never receive any outcome, approval, rejection, or follow-up regarding the recovery requests.

At this point I feel completely stuck. I understand that account security is important, but from my perspective I am providing every piece of account history I can remember while still having access to the original email account, and I have been trying for four months without receiving a meaningful response.

I am asking for guidance on what additional steps I can take to prove ownership of this account, or whether there is any way for a human reviewer to look into this situation.

Thank you for your time.