Apparently if your Microsoft account gets hacked you can already consider it gone
Apparently if your Microsoft account gets hacked you can already consider it gone
15 Comments
Went through all the BS with microsoft customer support, only to get this email a week later. The thing i’m pissed about is my minecraft account i have had since 2015, I still hate microsoft for forcing the migration on us.
Had that happen to my ex’s brother. Computer locked and had to recover data. No one should sign in to Microsoft account on windows. Microsoft mail systems are the worse in security.
Microsoft customer support can’t. Use the account recovery form instead.
https://support.microsoft.com/account-billing/b19c02d1-a782-dee6-93c3-dc8113b20c42 Guidance
I had similar issue.. I lost access to my account email and i had like 200k gs.. Everytime i fulled the form out they said nothing matched or was not enough to proove it was me its a joke so i had to start fresh .. I still have it added as a friend so can see it for memories sake
My old Xbox live account got hacked in like 2010 and I lost access to it forever. Since then I started taking cyber security so much more seriously.
OP, I hope you at least know how you got hacked so that in the future you can prevent something like this.
This happened to me with my first Microsoft account then had a personalised Skype name. Because of the LastPass breach back in 2021-2022, I went through the similar notions and never got it back.
I really don’t use Skype nowadays but it sucks because it was nice to have a personalised name rather than a random string of letters and numbers if you were to create a Skype account now.
I had a Skype account that got compromised years back. I contacted Microsoft multiple times about it, spoke to them on the phone. Funds were being added to my account from a South American country, really not sure why. Microsoft reversed the transaction multiple times, but they would just get added again to the account again and used. Changing passwords didn’t affect the situation.
I think they told me that the account would have to be dormant for a certain amount of time before it could be closed, so they were not able to just delete it for me. It was a very odd situation that I forgot until seeing this post.
If your account information is not up to date, then yes – you can kiss that account goodbye. Microsoft will not budge on this point.
However, as it has been super easy to setup MFA to Microsoft accounts for a number of years, I can’t really blame them for this stance. You should have exactly zero accounts (Microsoft or otherwise) anywhere that you have not enabled MFA on.
I have quite a bit of content associated with my Microsoft account. Their policies on allowing the owner to recover the account if something were to happen are so bad I’ve considered this when making future purchases and it actively pushes me away from their ecosystem.
Too much to loose etc.
If that is true, I’d be happy about it. Sure it sucks in your specific circumstances, but it’s great for the average user. It means the data is properly encrypted and there are no ad-hoc backdoors that allow third parties to access it. In fact if that’s true it would mean even if a government requested access to your files, they couldn’t get them without having your credentials. Nor can advertisers.
I’d be infinitely suspicious of a company who can give me my files back without having any idea of my credentials, it means they have holes in their security *on purpose* that bypass credentials related encryption, which is bad, big red flag. It’s the reason many companies being hacked leads to leaks of all their users credentials.
If anything a better balance would be to let you choose manually which of your personal data to make encrypted and which to leave accessible for potential recovery. But having no choice I prefer security over intrusiveness.
Now that being said, we still can’t know if it’s in fact impossible, or if they have some form of backdoor for making governments happy, but have it completely inaccessible outside of government intervention.
Did you have an Authenticator for this account?
Posting images like this of a block of text hurts my eyes really badly btw
Go through all of your accounts now, setup MFA. It’s been a thing that’s been around for a long time now and you’ve been neglecting to properly secure your accounts. Don’t use email as a MFA method, use an authenticator app of some sort to generate the codes.
Nah bro this is suspicious. The only way to change the security information is to know the answer. So how did “hackers” get your security answers? You either got phished which sucks but like…bro. Or you’re lying.
This is kinda fucked up… especially considering that when I look at the security info on my Microsoft account it tells me that I have like 50-100 failed login attempts on my account every day from Russia and Germany and China and Poland and shit… now I’ve changed my password and have mfa turned on… but god forbid one of these attempted login fuxkers actually gets lucky and takes my account, it’s really disappointing to think that I’ll never be able to get my account back with all the games and shit Ive purchased on it, and my gamerscore points and whatnot. This isn’t the first time I’ve seen this discussed either. If they’re able to detect so many failed login attempts then they should be doing more to protect our accounts because this is just ridiculous that even if we’re able to prove with like an identification card and debit card info or bank statements showing the purchases you made on the account that they would close the account and you lose all of your purchases and gaming history rather then see that you’re legitimately you and give you the account back, or offer other solutions to make your account safe after seeing shit loads of failed logins from countries all over the world