For a hacked Microsoft/Minecraft account, the supported recovery path is:
- Run a full malware scan on the PC first.
- Open Windows Security.
- Go to Virus and threat protection.
- Select Scan options > Full scan > Scan now.
- This should be done before changing any password.
- Try the Microsoft sign-in helper.
- It asks for the email address or phone number and either provides self-help steps or the option to talk to an agent.
- If access is still possible, change the Microsoft account password immediately.
- If sign-in fails, use the password reset flow.
- Review account security activity.
- Go to Security basics and select Review activity.
- If suspicious activity appears under Unusual activity, select This wasn't me.
- If it appears under Recent activity, select Secure your account.
- Check account settings that are commonly changed after compromise.
- Review connected accounts
- Review forwarding
- Review automatic replies
- If the account is locked, unlock it by signing in to the Microsoft account site to request a security code.
- Any phone number that can receive text messages can be used.
- The number does not need to be associated with the account.
- The code expires after 10 minutes.
- If the code does not work, enter the numbers from the body of the message, not the header.
- If the original email now shows "That Microsoft account doesn't exist", use the Microsoft account sign-in helper.
- If the appeal/recovery path keeps failing, use Contact Microsoft Support or the sign-in helper. Support agents cannot send password reset links or directly change account details, but those are the official escalation paths.
For Minecraft-specific loss after a Microsoft account compromise, the available guidance in the provided material points back to Microsoft account recovery first. If the attacker replaced the account’s security information and recovery no longer succeeds, the provided material does not list another supported recovery method beyond the official recovery and support flows.