My microsoft account has been hacked.

Maike Buß 0 Reputation points
2026-09-11T08:40:16.68+00:00

Two days ago my Mircosoft account was hacked. I received an e-mail that a security key was added, and later that it was removed, at which point I presume my e-mail and passwords had already been changed. I did not see the e-mails regarding this because I was at work.

I have already attempted to go through the account recovery tool of Microsoft on Wednesday, which told me to wait 24 hours for verification, and I have since not gotten any answer.

I have, in the meantime, been able to discover the full e-mail that my account has been changed to. I could still see it when opening the Xbox app. It's an @bibimail.net account, though, because I do not know whether or not it is allowed, I haven't added the full thing here.

Additionally, it seems that my phone number is still part of the account, though I never set up anything via the Authenticator app, as I never knew it existed for Microsoft, so I cannot request a code that way.

I do not know whether knowing the full e-mail that my account has been changed to is beneficial, but I figured that I have no other options left, so I might as well as help here.

Windows for home | Windows 11 | Security and privacy
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Vikki-T 10,015 Reputation points Microsoft External Staff Moderator
    2026-09-11T13:11:34.35+00:00

    Hello Maike Buß,

    I understand how concerning this situation is, especially since the sign-in email address and password appear to have been changed.

    Please check the Inbox and Junk/Spam folders of the contact email address you entered in the recovery form, as Microsoft normally sends the recovery result there. If you still have not received a response, use the Microsoft Account Sign-in Helper and select the option indicating that your account may have been compromised.

    You can also submit the Microsoft account recovery form again. Complete it from a device and location previously used with the account, and provide as much accurate information as possible, such as previous passwords and account activity.

    Please do not post the full unfamiliar email address, your phone number, passwords, verification codes, or recovery details publicly. Knowing the replacement email address may help you recognize what happened, but users and moderators in this community cannot use it to reverse the change or access the account.

    For more information, please visit How to recover a hacked or compromised Microsoft account

    Please note that this is a user-to-user support forum. Community members and moderators cannot access account records, check the status of a recovery request, or change security information. Microsoft Support agents also cannot manually bypass account verification, so the Sign-in Helper and recovery process remain the appropriate channels.

    Since an unfamiliar security key was added, I also recommend running a full malware scan on any device previously used to access the account and changing the passwords of other accounts that shared the same or a similar password. I know this isn't the news you were hoping for, but I wanted to make sure you got the most accurate information about your situation. Thank you so much for your understanding.     

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.