Hey there! Nice to meet you!
Since you mentioned that your account was hacked and you were able to request a security info change, you will need to wait for the 30-day restriction state to complete; but, if the hacker has their email or phone number added to your account, having them in full control over your account, they can simply cancel your security info change request.
If this happens, you will need to try requesting again, and hopefully, the hacker will not notice.
Unfortunately, it is also not possible to bypass or expedite the 30-day restriction state.
However, if the 30-day restriction state is complete, you will be able to remove the hacker's security info email/phone number from your account using your newly added security info.
If your payment method is linked to your hacked account, you will need to reach out to your bank immediately and request to freeze all charges from Microsoft to prevent unauthorized purchases.
You may also need to request a new payment method.
Thank you for your understanding! Please let me know if you need anything else.
Best regards,
Darhyl