Managing personal Outlook.com account settings, security, and privacy
You should also log into https://account.live.com/activity to see if there are any unrecognized but successful logins. If there are, you need to protect your account by changing your password to something long, complex and completely unique - never reuse passwords. Plus, you should add multifactor authentication or passkeys.