My Microsoft account has been hacked and compromised with email changed and all the details...

Dear Microsoft support team,

Hope this letter reaches you well. I wrote this letter to address the problems I had in the past few days. I am writing on my old school email as its my last Microsoft account that I can still access. It all started when I was verifying my m\Microsoft account on a website(must've been a sketchy website) and it only asked for my email and a 6-digit verification code so I thought it was harmless as what could this anonymous hacker even do without my password. Therefore, I proceeded with my life. However, after 30 minutes at 9:43pm pacific time the hacker changed

the primary alias to one of his emails(seen above). Then at 9:44pm pacific time, he added another email which I do not recognise(seen below).

At 9:44pm pacific time, he literally removed my email from my OWN account.(seen below)

about 5 minutes after than when I got logged out of my Microsoft account on xbox did I realized I must've been hacked but it was too late. I first tried logging into my Microsoft account, but it kept saying "we cant find a account with that username". I did some research on your forum and clicked on all the support link but without my OWN email I am unable to complete any of the links. Therefore, I tried putting the account that has hacked my computer in and it worked. I must say, this hacker must be very experienced in doing this as they changed all the personal data so when I submitted my account recovery form, the automated system says two hours later that I don't have sufficient data in order to prove I am the real owner of my account. If one of the Microsoft support staff could reach out to me I can provide you with all the data you need including which year my account was created and the timestamps of my purchases and could check that with the database. To be honest in the attachments I don't even bother blurring out my email so you guys can see that I, the real owner, received the account compromised email from Microsoft which is sent to my main alias before the hacker changed and deleted my email.

I've in the past day have collected my friends and family to find and resolve this problem, even to the extent as to backtracking to the sketchy website and finding the hacker of my account(apparently a schoolboy stealing accounts for Minecraft). I've reached out to this person and he demanded I pay 45 dollars in LTC, which I did since my Microsoft account meant much more than 45 dollars and I was able to get hold of his personal email(*** Die E-Mail-Adresse wurde aus Datenschutzgründen entfernt. *** apparently under the name of Max Bonkowski) when I deliberately sent him slightly less than the agreed amount and Paypal him the rest(I've selected business but yet have gotten a refund). This hacker also said something about selling my account to his buyer and this exchange of accounts is very worrying as I have many sensitive data(such as credit cards) which I've linked with my Microsoft and if put in bad hands could potentially get leaked. However this hacker, or scammer may I say, demanded that I pay him even more than the agreed upon value due to his greed, I realized that it would be a never ending payment to get my account back and would be only supporting the hackers actions which is the reason why I've reached out on the forum and for people who also experienced this problem, feel free to also type you experiences and how it was resolved(if ever).

There are many things I would like to address, first being when accessing the Microsoft setting, the secerity should be even higher than the already high standards as many Windows and even Mac users have many things connected to their Microsoft account as a schoolboy accessed and compromised my account. A suggestion I have is to urge all Microsoft users to enable 2FA because I haven't tampered with my settings in a long time. When in the logging in page, there should be both a password area and also a 6-digit code verification instead of filling just one of them.

I've read through close to all of the "complaints" about people getting their account hacked and realized that most people got locked out of their accounts just like me, with their own email removed. Therefore, I would like to make the suggestion that one should enter their password and a 2FA code which sends to one's phone number(as there can only be one owner for a phone number, the owner) instead of email(which could also be compromised) when logging into highly sensitive information like when one is tampering with the email and personal data.

Also, the fact that a school boy with probably some coding knowledge(in order to create the sketchy website) could easily and be so extremely experienced in getting into people's Microsoft account, it really worries me when a full time hacker decides to steal people's data

Again, if a Microsoft member could reach out to me, I would be glad to double check my data with your database.

Thank You!

Warm Regards,

Harry

:)