How to recover my Minecraft account when the security features had been changed by the hacker?

Microsoft has suspended my account. I know that my email has been compromised because of the hacker changed my security settings and i cannot do anything, when i go cover my account it says that my account/email dosent exist and i cannot recover it because
the hacker changed my email security settings

I am trying to recover my microsoft account that is linked to my minecraft of which have been migrated from mojang. How could i know the email if the hacker has changed it?

Yes I changed it multiple times but the hacker changed the verification email my Microsoft account has been recovered but the Xbox account where we have to login to play games like forza or minecraft has been hacked

Hackers were exploiting this and migrating people's accounts to other countries. Hopefully this means the feature has been disabled until they figure out how to fix the security flaw.

My account got hacked and migrated to Russia.

We did as you said and were able to access the Microsoft account and Minecraft with the email of the hacker and the new password. We tried to change the email of the hacker but it requested us to send a code to the security email that the hacker put there. So we click 'we didn't have any' way of receiving the code and followed the instructions. So now we have to wait 30 days for the verification and replace of the security information.

She is accessing, as I said the Minecraft and other things with the hacker's email and the new password we created. My question is, what if the hacker enters the Microsoft account again and changes again the email? Is it possible that they do that?

We are feeling so insecure now.

Another question, how can the person change their role to an administrator in our Family Safety in their desktop (the hackers's desktop information appears in our Family Safety) so that some resources of the Family Safety do not work? How can this happen as my child is under age? She shouldn't be able to do that as the age is state as 17, right?

Should we remove her from the family security while the email is the hacker's?