My account was hacked and they have changed my email so i can no longer log in what does this mean for the things that i would lose and is there a way i can get it back DaveM121 • 929K Reputation points • Independent Advisor 2026-06-04T05:16:38.7666667+00:00 I wish I had better news,, when a Microsoft account is hacked, if the hackers change the associated data like the Email, then that account is usually no longer recoverable, this forum is just a user to user account and no-one here has any account access, try using the process they provide on this link to recover a hacked account, if this process is not successful, sadly, that account cannot be recovered. https://support.microsoft.com/en-us/account-billing/how-to-recover-a-hacked-or-compromised-microsoft-account-24ca907d-bcdf-a44b-4656-47f0cd89c245 5 comments Show comments for this answer cathal • 0 Reputation points 2026-06-04T05:19:06.8366667+00:00 quick question if they now have access to the account what other things should i do to prevent it from getting worse eg would they have access to my outlook as its ran by microsoft 0 votes Deleted This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information. DaveM121 • 929K Reputation points • Independent Advisor 2026-06-04T05:34:23.3166667+00:00 When they hack an account, they usually replace your Email account with their own Email, so they would not have access to your Email account, they may have access to your OneDrive, if you fill in the account recovery form, if it is proven the account has been hacked, Microsoft usually lock the account to stop further access to the account. 0 votes cathal • 0 Reputation points 2026-06-04T05:53:15.5+00:00 Ty for responding Should I create a new email and just transfer everything over as when I login in to microsoft it says no account found or just create a new microsoft account using the old email. Also when i use the account recovery(sign in helper) it also says account disabled. Is there any way to check if they have access to one drive since I log in to it 0 votes DaveM121 • 929K Reputation points • Independent Advisor 2026-06-04T05:56:32.5466667+00:00 Sadly if that process is unable to recover your account, you will need to create a new account, if it is indicated the account has been disabled, then Microsoft may have already locked the hacked account. 0 votes Sign in to comment Add comment I wish I had better news,, when a Microsoft account is hacked, if the hackers change the associated data like the Email, then that account is usually no longer recoverable, this forum is just a user to user account and no-one here has any account access, try using the process they provide on this link to recover a hacked account, if this process is not successful, sadly, that account cannot be recovered. https://support.microsoft.com/en-us/account-billing/how-to-recover-a-hacked-or-compromised-microsoft-account-24ca907d-bcdf-a44b-4656-47f0cd89c245 cathal • 0 Reputation points 2026-06-04T05:19:06.8366667+00:00 quick question if they now have access to the account what other things should i do to prevent it from getting worse eg would they have access to my outlook as its ran by microsoft 0 votes quick question if they now have access to the account what other things should i do to prevent it from getting worse eg would they have access to my outlook as its ran by microsoft Deleted This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information. This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information. DaveM121 • 929K Reputation points • Independent Advisor 2026-06-04T05:34:23.3166667+00:00 When they hack an account, they usually replace your Email account with their own Email, so they would not have access to your Email account, they may have access to your OneDrive, if you fill in the account recovery form, if it is proven the account has been hacked, Microsoft usually lock the account to stop further access to the account. 0 votes When they hack an account, they usually replace your Email account with their own Email, so they would not have access to your Email account, they may have access to your OneDrive, if you fill in the account recovery form, if it is proven the account has been hacked, Microsoft usually lock the account to stop further access to the account. cathal • 0 Reputation points 2026-06-04T05:53:15.5+00:00 Ty for responding Should I create a new email and just transfer everything over as when I login in to microsoft it says no account found or just create a new microsoft account using the old email. Also when i use the account recovery(sign in helper) it also says account disabled. Is there any way to check if they have access to one drive since I log in to it 0 votes Ty for responding Should I create a new email and just transfer everything over as when I login in to microsoft it says no account found or just create a new microsoft account using the old email. Also when i use the account recovery(sign in helper) it also says account disabled. Is there any way to check if they have access to one drive since I log in to it DaveM121 • 929K Reputation points • Independent Advisor 2026-06-04T05:56:32.5466667+00:00 Sadly if that process is unable to recover your account, you will need to create a new account, if it is indicated the account has been disabled, then Microsoft may have already locked the hacked account. 0 votes Sadly if that process is unable to recover your account, you will need to create a new account, if it is indicated the account has been disabled, then Microsoft may have already locked the hacked account. AI answer 2026-06-04T04:44:54.4566667+00:00 If the email address and security info on a Microsoft account were changed by an attacker, access to all services tied to that account is at risk, including Outlook.com email, OneDrive files, Xbox/Minecraft entitlements, Microsoft Store purchases, and Windows sign‑in where that Microsoft account is used. Recovery depends on whether the account can still be verified as the rightful owner. Follow these steps immediately: Run a malware/antivirus scan Before changing any passwords, clear the device of malware so the attacker cannot capture new credentials. If using Windows 10/11 or 8.1, turn on and run a full scan with Windows Defender as described in the guidance for hacked accounts. Try to recover the hacked account Use the official hacked/compromised account flow: start from the sign‑in helper for hacked accounts and follow the steps in How to recover a hacked or compromised Microsoft account . The tool will: Ask for the email address or phone number. Offer self‑help or the option to talk to an agent, depending on the situation. If sign‑in fails, use Forgot my password and choose I think someone else is using my Microsoft account , then complete the recovery form with as much accurate information as possible (old passwords, services used, approximate creation date, etc.). If the attacker changed security info (email/phone) If a message appears like “Your security info change is still pending” or “You can’t access this site right now” , this means all previous security info was removed and replaced. The account is put into a restricted state for 30 days while the change is pending. During this 30‑day period: Some actions are blocked to protect the account. Notifications are sent to the original security info (old email/phone) so the rightful owner can see that changes were made. On that pending screen, use any available built‑in options: Let us know if the change was not made by you (routes through the unauthorized‑change flow), or Cancel this request if you did initiate the change and still have access to the old security info. If recovery succeeds Immediately change the password to a strong, unique one. Review and fix account settings that might have been altered: Connected accounts Forwarding rules Automatic replies Remove any attacker‑added aliases or sign‑in methods if you can reach alias/security management. Add additional secure verification methods (for example, another email/phone or Microsoft Authenticator) using the Advanced security options page so there is more than one way to prove identity in the future. If recovery fails If the recovery form and hacked‑account flow do not grant access, and the attacker has fully replaced the security info, support articles and community guidance indicate there may be no further method to regain that specific personal Microsoft account. In that case, access to email, purchases, and services tied only to that account may be permanently lost. To minimize future risk on any accounts that are still accessible, ensure: Devices are clean (malware‑free). Strong, unique passwords are used. Multiple up‑to‑date security verification methods are configured. References: How to recover a hacked or compromised Microsoft account What does “Security info change is still pending” mean? How to help keep your Microsoft account secure What happens if there's an unusual sign-in to your account Hello , welcome to Account help & learning Unblock my Outlook.com account My account got hacked. - Microsoft Q&A My account got hacked - Microsoft Q&A Need help with hacked microsoft account - Microsoft Q&A my microsoft account has been compromised - Microsoft Q&A Cannot Access Microsoft Account After Hacker Changed Email, Advice Needed - Microsoft Q&A AI-generated content may be incorrect. Read our transparency notes for more information. If the email address and security info on a Microsoft account were changed by an attacker, access to all services tied to that account is at risk, including Outlook.com email, OneDrive files, Xbox/Minecraft entitlements, Microsoft Store purchases, and Windows sign‑in where that Microsoft account is used. Recovery depends on whether the account can still be verified as the rightful owner. Follow these steps immediately: Run a malware/antivirus scan Before changing any passwords, clear the device of malware so the attacker cannot capture new credentials. If using Windows 10/11 or 8.1, turn on and run a full scan with Windows Defender as described in the guidance for hacked accounts. Before changing any passwords, clear the device of malware so the attacker cannot capture new credentials. If using Windows 10/11 or 8.1, turn on and run a full scan with Windows Defender as described in the guidance for hacked accounts. Try to recover the hacked account Use the official hacked/compromised account flow: start from the sign‑in helper for hacked accounts and follow the steps in How to recover a hacked or compromised Microsoft account . The tool will: Ask for the email address or phone number. Offer self‑help or the option to talk to an agent, depending on the situation. If sign‑in fails, use Forgot my password and choose I think someone else is using my Microsoft account , then complete the recovery form with as much accurate information as possible (old passwords, services used, approximate creation date, etc.). Use the official hacked/compromised account flow: start from the sign‑in helper for hacked accounts and follow the steps in How to recover a hacked or compromised Microsoft account . The tool will: Ask for the email address or phone number. Offer self‑help or the option to talk to an agent, depending on the situation. Ask for the email address or phone number. Offer self‑help or the option to talk to an agent, depending on the situation. If sign‑in fails, use Forgot my password and choose I think someone else is using my Microsoft account , then complete the recovery form with as much accurate information as possible (old passwords, services used, approximate creation date, etc.). If the attacker changed security info (email/phone) If a message appears like “Your security info change is still pending” or “You can’t access this site right now” , this means all previous security info was removed and replaced. The account is put into a restricted state for 30 days while the change is pending. During this 30‑day period: Some actions are blocked to protect the account. Notifications are sent to the original security info (old email/phone) so the rightful owner can see that changes were made. On that pending screen, use any available built‑in options: Let us know if the change was not made by you (routes through the unauthorized‑change flow), or Cancel this request if you did initiate the change and still have access to the old security info. If a message appears like “Your security info change is still pending” or “You can’t access this site right now” , this means all previous security info was removed and replaced. The account is put into a restricted state for 30 days while the change is pending. During this 30‑day period: Some actions are blocked to protect the account. Notifications are sent to the original security info (old email/phone) so the rightful owner can see that changes were made. Some actions are blocked to protect the account.

Notifications are sent to the original security info (old email/phone) so the rightful owner can see that changes were made. On that pending screen, use any available built‑in options: Let us know if the change was not made by you (routes through the unauthorized‑change flow), or Cancel this request if you did initiate the change and still have access to the old security info. Let us know if the change was not made by you (routes through the unauthorized‑change flow), or Cancel this request if you did initiate the change and still have access to the old security info. If recovery succeeds Immediately change the password to a strong, unique one. Review and fix account settings that might have been altered: Connected accounts Forwarding rules Automatic replies Remove any attacker‑added aliases or sign‑in methods if you can reach alias/security management. Add additional secure verification methods (for example, another email/phone or Microsoft Authenticator) using the Advanced security options page so there is more than one way to prove identity in the future. Immediately change the password to a strong, unique one. Review and fix account settings that might have been altered: Connected accounts Forwarding rules Automatic replies Connected accounts Forwarding rules Automatic replies Remove any attacker‑added aliases or sign‑in methods if you can reach alias/security management. Add additional secure verification methods (for example, another email/phone or Microsoft Authenticator) using the Advanced security options page so there is more than one way to prove identity in the future. If recovery fails If the recovery form and hacked‑account flow do not grant access, and the attacker has fully replaced the security info, support articles and community guidance indicate there may be no further method to regain that specific personal Microsoft account. In that case, access to email, purchases, and services tied only to that account may be permanently lost. If the recovery form and hacked‑account flow do not grant access, and the attacker has fully replaced the security info, support articles and community guidance indicate there may be no further method to regain that specific personal Microsoft account. In that case, access to email, purchases, and services tied only to that account may be permanently lost. To minimize future risk on any accounts that are still accessible, ensure: Devices are clean (malware‑free). Strong, unique passwords are used. Multiple up‑to‑date security verification methods are configured. How to recover a hacked or compromised Microsoft account What does “Security info change is still pending” mean? How to help keep your Microsoft account secure What happens if there's an unusual sign-in to your account Hello , welcome to Account help & learning Unblock my Outlook.com account My account got hacked. - Microsoft Q&A My account got hacked - Microsoft Q&A Need help with hacked microsoft account - Microsoft Q&A my microsoft account has been compromised - Microsoft Q&A Cannot Access Microsoft Account After Hacker Changed Email, Advice Needed - Microsoft Q&A