Urgent Assistance Required — Child’s Microsoft Account Compromised and Email/Recovery Information Changed

My family uses Microsoft Family Safety, and my son's Microsoft account has been compromised.

The attacker changed the email address associated with his account to an email address belonging to another person and also changed the account's recovery email address. His original email address is no longer recognized as belonging to a Microsoft account.

I received no notification from Microsoft Family Safety regarding these changes. I discovered the compromise through our family account.

The compromised account still appears in our Microsoft Family Safety dashboard, but it now displays the changed account information.

I have attempted to follow Microsoft's account recovery procedures, but the standard recovery options do not address this situation. The original email address is no longer recognized, and the recovery email address has been replaced. Consequently, I cannot complete the usual recovery process using the information originally associated with my son's account.

As his parent and Family Safety organizer, I need assistance recovering his original account and restoring his legitimate account information.

I am requesting the following:

Assistance escalating this incident as a compromised minor's account, where the attacker has changed both the sign-in email address and the recovery email address.

Guidance on how to establish ownership of the account when the original sign-in information has been removed or replaced.

An explanation of whether the account's continued presence in our Family Safety dashboard can help Microsoft identify and investigate the compromised account.

Clarification regarding why no Family Safety notification was received when these account changes occurred.

I understand that Microsoft must protect account security and verify ownership. However, the normal recovery procedures appear insufficient for this specific situation because the attacker changed the very information those procedures rely upon.

Please advise how this incident can be escalated for review and what additional information I can provide to establish that this is my son's original account.

Thank you for your assistance.