I got hacked

1. Scan the PC for malware before changing anything. Run a full antivirus scan first. On Windows 11, Windows Defender is available from Start and searching for Windows Defender. This matters because changing the password before cleaning the PC can let the attacker capture the new password again.
2. Use the Microsoft Sign-in Helper immediately. Enter the email address or phone number tied to the account and follow the recovery path shown there. If the account is recognized as compromised, it can guide to self-help steps or offer the chance to talk to an agent.
3. Try password recovery. On the sign-in page, select Forgot my password, then choose I think someone else is using my Microsoft account if that option appears, and follow the recovery steps.
4. If the attacker changed the sign-in email or the account is no longer recognized, use account recovery. If the original username is no longer recognized or the message says the account does not exist, use the Sign-in Helper. If the username and password stopped working, use Recover your account and try any other alias or phone number previously added to the account.
5. After access is restored, review account settings immediately. Check connected accounts, forwarding, and automatic replies because those settings may have been changed by the attacker.
6. Then secure the account to prevent this happening again. Add another way to sign in or verify identity in Advanced security options so recovery is easier if the account is compromised again.

If the account still cannot be recovered through these steps, use the support contact option provided from the Microsoft support flow for account sign-in issues.

References:

• How to recover a hacked or compromised Microsoft account
• I can't sign in to my Microsoft account
• My username and password have stopped working
• What happens if there's an unusual sign-in to your account
• How to help keep your Microsoft account secure