email/ facebook hack

If Outlook.com shows PM instead of AM, correct its time-zone setting, then independently complete the account-security checks because the time display alone does not confirm whether unauthorized access has stopped.

Correct the Outlook.com time

On a computer:

1. Open Outlook.com and select Settings (gear icon).
2. Select Calendar > View.
3. Under Time zones, open Display my calendar in time zone.
4. Select your correct local time zone.
5. Select Save.^1^

Check whether messages and calendar items now show the correct AM/PM value. If only one old message has the wrong time, note that the sender’s timestamp or message headers may be involved rather than your current Outlook setting.

Secure the Microsoft account

Since the account was recently compromised:

1. Run a full malware scan first. In Windows Security, open Virus & threat protection > Scan options > Full scan > Scan now.
2. After the scan, change the Microsoft account password to a new, unique password that is not used for Facebook or any other service.
3. In Outlook.com, open Settings > Mail and inspect:
   • Rules
   • Forwarding
   • Automatic replies
   Remove anything you did not create. Microsoft specifically recommends checking account settings after a compromise.^2^
4. Open the Microsoft account Security page and select Review activity. Expand unknown entries and choose This wasn’t me or Secure your account, whichever is displayed.^3^
5. Check for changes you did not make, especially:
   • Added or deleted aliases
   • Changed security email addresses or phone numbers
   • Newly authorized applications
   • Two-step verification being disabled
   The Recent activity page shows significant account events from the last 30 days.^4^
6. In Advanced security options, select Sign out everywhere. Microsoft says browsers and apps can take up to 24 hours to be signed out; Xbox consoles are excluded.^5^
7. Enable two-step verification and ensure every recovery phone number and email address belongs to you.

Secure Facebook separately

Changing the Microsoft password does not secure Facebook. From Facebook’s own account settings:

• Change to a different, unique password.
• Review logged-in devices and terminate unfamiliar sessions.
• Remove unknown email addresses, phone numbers, and connected applications.
• Enable two-factor authentication.
• If the same password was reused anywhere else, change it there as well.

If unknown Microsoft sign-ins continue after the password change and global sign-out have completed, use the sign-in helper on Microsoft’s compromised-account support page to obtain the available recovery or support options.^2^

References

1. [Web](#tab/web)
2. How to recover a hacked or compromised Microsoft account | Microsoft Support
3. What happens if there's an unusual sign-in to your account | Microsoft Support
4. Check the recent sign-in activity for your Microsoft account
5. How to sign out of your Microsoft account everywhere | Microsoft Support