Microsoft 365 features that help users manage their subscriptions, account settings, and billing information.
Hi Jed,
Changing your password was the right step. Unfortunately, you cannot stop someone from attempting to sign in if they already know your email address, but you can make those attempts ineffective.
I would enable two-step verification or, even better, make the account passwordless with Microsoft Authenticator. Microsoft recommends passwordless sign-in because a password can no longer be guessed or reused.
Also check Recent activity and mark anything suspicious as “This wasn’t me.” If this is a personal Microsoft account, another useful option is creating a separate alias for sign-in and disabling sign-in for the public email address they are currently targeting
Thank you, and feel free to respond back for more assistance.