Sole Global Admin locked out of Azure tenant – MFA reset needed (personal Microsoft account, lost Authenticator)

Hi,

I'm locked out of my own Azure tenant and need help from the Data Protection team to reset MFA.

Situation:

• I'm a private customer with a Pay-As-You-Go subscription.
• I sign in with a personal Microsoft account (live.com identity) which is the only Global Administrator of the tenant ("Standardverzeichnis").
• Since mandatory MFA for Azure was enforced, every create/update/delete fails with "RequestDisallowedByAzure ... without authenticating through MFA" (CLI and portal).
• When signing in to the portal for my tenant, I'm asked for a 6-digit code from the Microsoft Authenticator app. The device/app registration that was used for this no longer exists. "Sign in another way" offers no alternative method.
• My personal Microsoft account itself is fine and has 2-step verification enabled (Authenticator shows 8-digit codes), but those codes are not accepted by the tenant prompt.
• Read-only access via Azure CLI still works, so the subscription and resources are intact.

What I've tried:

• Re-login via az login (incl. claims challenge) – write operations still blocked.
• mysignins.microsoft.com security info for the tenant – requires the same lost 6-digit code.
• Calling Microsoft support (Germany) – I was not routed to anyone who could help with an Entra tenant MFA reset.

There is no other admin in the tenant, so self-service recovery is not possible. Could a moderator please help me get in touch with the Data Protection team?

I can provide tenant ID, subscription ID and billing/invoice details (recent invoices, payment method) privately to verify ownership.