I've been hacked

Take these steps immediately:

1. Run a full malware scan on each Windows PC before changing any passwords.
   • Open Windows Security.
   • Open Virus and threat protection.
   • Select Scan options > Full scan > Scan now.
   • Keep antivirus up to date and continue regular scans.
2. Change or reset the Microsoft account password after the scan finishes.
   • If sign-in still works, change the password.
   • If sign-in does not work, use the password reset flow.
   • Use a strong, unique password.
3. Review Microsoft account settings that attackers commonly change.
   • Check connected accounts.
   • Check forwarding.
   • Check automatic replies.
4. Check recent sign-in activity.
   • Review the recent activity page to see when and where the account was accessed, including successful sign-ins and security challenges.
5. Add or update security information.
   • Add an alternate email address and mobile phone number so account recovery is easier.
6. Turn on multi-factor authentication.
   • This is one of the most important protections for the account.
7. If the account appears hacked, use the Microsoft sign-in helper tool.
   • It asks for the email address or phone number and then provides self-help steps or the option to talk to an agent.
8. If more help is needed, use Microsoft support options for account recovery or to talk to a support agent.

Also be cautious with threatening emails claiming a device was hacked. Report phishing messages and avoid clicking links or opening attachments from suspicious messages.

References:

• How to recover a hacked or compromised Microsoft account
• Help protect your Outlook.com email account
• What to do if your email address is leaked