An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
Urgent: Suspected Azure Account Compromise — Unauthorized Charges
I am a university student and I need urgent help with a suspected compromise of my Microsoft/Azure account and a very large unauthorized Azure bill.
I had not actively used my Azure account for a long period. I recently logged into Azure and discovered that my Azure credits, which I had received for my academic/learning use, had been completely consumed. I then discovered Azure AI Foundry resources that I did not create or authorize.
The current Azure billing page shows approximately ₹5,420,835.92 (₹54.2 lakh / approximately USD $60K) for the billing period August 1–31, 2026.
I have already deleted the Foundry resources that I found in order to prevent any further unauthorized usage.
There is additional context that makes me believe this is part of a broader compromise. Over the past several weeks/month or so, I have also had reason to believe that some of my other personal accounts and services have been compromised or accessed without my authorization, including email and other online services. I have also had concerns regarding my banking/payment security. Because of these concerns, I had already deactivated/frozen all of my cards, including the card associated with my Azure account.
I only recently realized that my Azure account itself had also been misused.
I am currently a student and do not have the financial ability to pay a ₹54.2 lakh Azure bill. More importantly, I did not authorize the Azure usage that generated these charges and I am formally disputing the entire amount.
I would like to ask the Azure community and Microsoft staff:
What is the correct procedure for reporting this as unauthorized Azure usage/account compromise?
- Can Microsoft temporarily deactivate or secure the subscription to prevent any further usage?
- If the usage is confirmed to have resulted from unauthorized access, what is the process for having the
I have not intentionally used the resources responsible for these charges. I am willing to provide Microsoft with whatever information is necessary to investigate the incident.
I would appreciate guidance from the Azure community on the appropriate escalation path for a case of this size.
I am particularly concerned because the amount is far beyond anything I could possibly pay, and I want to resolve this properly rather than simply ignore the bill.