hacked account

i recently my mums microsoft account got hacked while i was away. over £80 was fraudulently spent, on gift codes, and other stuff for xbox. they changed the password etc, but i got it back, im now in the problem that when they accessed my account, they changed
my gamer tag, and the sign in email. i tried changing the security info on this email after gaining access, but the hacked canceled the request as they had 30 days untill the info was replaced...i would like to make a request to have the account reverted to
how it was a month ago, with my xbox gamer tag change back to [Mod Removed - Personal Information] instead of
[Mod Removed - Personal Information], and the sign in email changed back to
[Mod Removed - Personal Information] (which is still the billing email, but they also changed the password for my mums email which is just that, which also contains her work stuff, bank info and more) this was a breach of your security as no
passwords were easy, nor accessable to anyone, or saved anywhere. my email is
[Mod Removed - Personal Information], my phone number is [Mod Removed - Personal Information], i can privide evidance of the post code and adress the account was baught on as i still live here, and the bank details of my mums bank.
i dont want to go down the legal rought but its looking bad if this cant be resolved by staff here, any help or advice is amazing.

they changed the email of the account to, [Mod Removed - Personal Information] the security email the hacker has set for it is
[Mod Removed - Personal Information], i tried accessing that email too but no luck, so i cant change anything on the account, and i have to wait 30 days befor i can attempt to change the security email and phone number, and then i need to hope
the hacker doesnt cancle the request befor the 30 days. as they now have a recovery code, that i cant delete without access to the security account. they also cancled my xbox live subscription, so my 14 months of gold my mum paid for, is gone.

as im using the same unsecure/comprimised account to pose this question, please reply to me on email and text, as idk if ill be locked out of the account again

:)