Account got taken over, within minutes

When an attacker changes the password, MFA, and all other recovery methods of a Microsoft account - which any smart attacker will do quickly - I'm very sorry to say that the account is lost. You will never get it back again.

It's good that you were able to remove all your details from the account. Nevertheless, within the same two minutes, your attacker was likely able to copy everything in your account. You should presume that the attacker knows everything about that was in your account, including passwords, payment method, contact addresses and whatever was stored in your OneDrive.

These attacks are done by professionals using sophisticated software. Thousands of Microsoft accounts (and Google accounts and Apple accounts, etc.) are stolen every week. You need to be on the lookout for signs that your identity is being misused.