Xbox account hacked and email and password changed. Unable to sign in.

Hello there, this is Manuela. I'm an Independent Advisor and community user like you, ready to assist with this.
Not a Microsoft employee.

I'm sorry to hear you lost access to your Microsoft account. In situations like this, the recommended option is trying to recover it by following the Microsoft interactive guide below:

https://support.microsoft.com/account-billing/h...

As a reminder, please notice that no one at Microsoft can view or change the account details for you, this is for security policies

Thank you for your response. I went through these steps last night and I was able to recover the account for a short period of time but the person that stole/hacked the account has signed into the Microsoft Authenticator so as soon as I changed my password they were able to go in and change it to something else. Because of the Authenticator I was unable to change the credentials on the account such as email address and phone number.

Are you still able to go to
https://account.live.com/Proofs/Manage and sign into your account?

If you are signed in on the account security proofs page, please change your password again.

After changing the password, check your security information (i.e. secondary emails and phone numbers that are used to recover your account in case you forget your password).

Make sure that there are no unknown emails or phone numbers present. A hacker that added their own email and phone number could then recover your account again with the provided email and phone number.

And MOST IMPORTANTLY: Scroll down on the page and enable Two Step Verification.

After enabling Two Step Verification, set up the free authenticator app on your smartphone.

With that app and Two Step Verification, the Live service will ask for a secret code whenever someone tries to sign in to your account from a new device.

Unless the hacker physically steals your phone, the hacker can't get the code and will be unable to get into your account to change the password.

Also change the passwords of your email accounts that are in your account's security information.

If the hacker managed to get access to your recovery email account, they can again reset your password, and confirming the reset through your hacked email.

If possible also enable Two Step Verification with your email account, if you are using Gmail or Outlook.

This is a scam that originated in 2019. I, too, have been constantly changing my password -- thankfully, I looked up "why I keep getting this unusual sign-in activity" today -- and found it is a scam. I have changed my password again! But this time I changed it legitimately on the Microsoft Site -- not the link provided by the "authentic" email. I hope it provides enough protection, as any of the other passwords might afford someone to hack the other information attached to that account!

Beware of Fake Microsoft Account Unusual Sign-in Activity Emails (bleepingcomputer.com)

Password the same as other passwords? Dude, that's like wearing a HACK ME sign at a Hacker's convention. PLEASE make sure the password is different on the Xbox service, as hackers who get into an email account using the same password now have your Xbox password.