I believe my Xbox Live account was hacked

I'm not certain if this is the right place to post this, but any help would be deeply appreciated.

A couple days ago, I noticed that on the game Fortnite, I had v-bucks as well as the battle pass - I knew that I hadn't bought either of these, but I assumed it was a mistake on Epic's end and that they'd reset it at some point down the road. Earlier today,
the v-buck amount changed twice. I logged into my email associated with my Xbox Live account, and discovered 2 payments made to Fortnite that I never made. Nobody I know (friends, family, etc.) made those purchases. Furthermore, on my email account, I discovered
a second Xbox One on my devices list (I removed it). So I'm fairly certain my account's been compromised somehow.

If anyone could offer some help with possibly resolving this for good and saving my account, I'd be grateful; what should I do, what steps to take, etc.. So far, I've done the following

• Added a controller passkey to the Xbox Live account, and set it's security setting to 'Lock It Down'
• Changed my email password; set up a new primary alias
• Added new security alert phone number
• Installed and set up the Microsoft Authenticator app on my phone
• Removed all app passwords (I don't ever use these, but I did it just in case)
• Removed all trusted devices
• Replaced recovery code
• Canceled all subscriptions and removed all payment methods associated with my Xbox Live account and email

:)