Hacked account

“CDOC ARIS Exchange Acct” appears to be a sender/display label associated with Microsoft account review or recovery correspondence—not the account that accessed your Outlook.com mailbox—and Microsoft does not publicly document a definitive expansion or function for that label.^1^

Do not assume the label proves who compromised the account. Also, do not reply with passwords, verification codes, or other sensitive information.

Since the recovery forms are already submitted

1. Check the contact email entered on the form, including its Spam and Junk folders. Microsoft says the result should arrive within 24 hours.^2^
2. Verify the message without using its links. Open Microsoft’s official hacked-account page directly and use its Sign-in Helper. It requests the affected email address or phone number, then provides the applicable self-help or agent option.^3^
3. If Microsoft cannot verify the first submission, submit an improved recovery form—but no more than twice per day. Use:
   • A device previously used with the account.
   • Your usual home or office location.
   • Exact Outlook.com email subject lines and contacts.
   • Old passwords and details of connected Microsoft services.
   • A working alternate email that only you control.^2^
4. If the form says the account is locked or disabled, use the reinstatement route presented by the Sign-in Helper rather than submitting the ordinary recovery form again.^4^

Microsoft support agents cannot manually change account details or send a password-reset link. Recovery depends on the automated verification process.^2^

If you can still access the account

Before changing the password:

1. Run an updated antivirus full scan. In Windows Security, open Virus & threat protection → Scan options → Full scan → Scan now.
2. Change the password to a new, unique password.
3. Review Outlook.com connected accounts, forwarding, and automatic replies for changes you did not make.^3^
4. Check the Recent activity page. It shows sign-ins from the previous 30 days, including available device or application details.^5^
5. Add recovery email/phone information and enable two-step verification after confirming that no unknown security method remains.^6^
6. Change the password anywhere else it was reused, and contact your bank immediately if payment information or unauthorized purchases may be involved.

Do not post the recovery email, case number, sender address, verification codes, or account details publicly.

References

1. is this email real? - Microsoft Q&A
2. Help with the Microsoft account recovery form | Microsoft Support
3. How to recover a hacked or compromised Microsoft account | Microsoft Support
4. Account got hacked - Microsoft Q&A
5. Email is missing from your Outlook.com inbox | Microsoft Support
6. Help protect your Outlook.com email account | Microsoft Support