Outlook Hijacked! Microsoft Account Compromised – Primary Alias Changed, Recovery & 2FA Removed Without Notifications

Hello,

I am seeking urgent help regarding my Microsoft account that appears to have been compromised.

My account has had its primary alias changed. When I attempt to sign in using my original email, I receive the message:

“We don’t recognize this account.”

Here is what makes this situation extremely confusing:

I had multiple 2FA methods enabled:

SMS verification

  Microsoft Authenticator app
  
     Security key
     
     I had a **recovery email** configured.
     
     I did **not receive any login notifications**, approval prompts, SMS codes, or security alerts.
     
     I did not approve any security changes.
     
     There were no unusual authenticator prompts.
     

Despite this, the attacker was somehow able to:

Remove my phone number

Remove my recovery email

Remove my authenticator methods

Change the primary alias

Lock me out of the account

However, I still have:

Access to my Microsoft Authenticator app (the account entry still appears)

Access to my Minecraft account, which I redeemed using a physical code

Access to Steam, which is linked to my Xbox account (I purchased Sea of Thieves on Steam and it connects to my Microsoft/Xbox account)

This suggests that the underlying Microsoft identity still exists, but the sign-in alias has been changed or removed.

I have attempted the automated account recovery form multiple times, but it has been rejected, stating the information provided was insufficient.

I am trying to understand:

How security methods could be removed without any notification or MFA prompt.

Whether my account can be recovered given that I still have authenticator presence and active linked services (Minecraft and Xbox/Steam).

Whether there is a way to verify ownership using:

Historical passwords

  Device/IP history
  
     Minecraft redemption details
     
        Linked Xbox/Steam purchase history
        

This account is tied to important services, and I am trying to escalate beyond the automated recovery system.

If any Microsoft representative or experienced user can advise on the proper escalation path, I would greatly appreciate it.

Thank you.Hello,

I am seeking urgent help regarding my Microsoft account that appears to have been compromised.

My account (previously under the domain legenmail.com) has had its primary alias changed. When I attempt to sign in using my original email, I receive the message:

“We don’t recognize this account.”

Here is what makes this situation extremely confusing:

I had multiple 2FA methods enabled:

SMS verification

  Microsoft Authenticator app
  
     Security key
     
     I had a **recovery email** configured.
     
     I did **not receive any login notifications**, approval prompts, SMS codes, or security alerts.
     
     I did not approve any security changes.
     
     There were no unusual authenticator prompts.
     

Despite this, the attacker was somehow able to:

Remove my phone number

Remove my recovery email

Remove my authenticator methods

Change the primary alias

Lock me out of the account

However, I still have:

Access to my Microsoft Authenticator app (the account entry still appears)

Access to my Minecraft account, which I redeemed using a physical code

Access to Steam, which is linked to my Xbox account (I purchased Sea of Thieves on Steam and it connects to my Microsoft/Xbox account)

This suggests that the underlying Microsoft identity still exists, but the sign-in alias has been changed or removed.

I have attempted the automated account recovery form multiple times, but it has been rejected, stating the information provided was insufficient.

I am trying to understand:

How security methods could be removed without any notification or MFA prompt.

Whether my account can be recovered given that I still have authenticator presence and active linked services (Minecraft and Xbox/Steam).

1. Whether there is a way to verify ownership using:

Historical passwords

Device/IP history

Minecraft redemption details

• Linked Xbox/Steam purchase history
• I had my phone number auth!

This account is tied to important services, and I am trying to escalate beyond the automated recovery system.

If any Microsoft representative or experienced user can advise on the proper escalation path, I would greatly appreciate it.

Thank you.