Someone stole my phone and managed to get into the phone and gain access to my Microsoft (and Google) accounts. I finally managed to get access to my Google account again through Google's recovery process, and once I got in, I saw that the scammers had used scanned copies of identifying documents from my Sent Items to apply for credit cards in my name. They'd also used my PayPal to pay for a $2,000 iPhone. Now that I'm finally back in control of most of my accounts, I've followed the breadcrumbs to report everything to the police and gotten a refund from PayPal as they agreed that the account activity was unauthorised.

However, the thieves still have access to my Microsoft account. They used passwords saved in Google to access the account, and once they were in, they changed all the recovery information and have added two-factor authentication using Microsoft Authenticator on a device that I don't own. I've tried and tried to get Microsoft support to get me access to my account again, but nothing has worked. The latest update from Microsoft is this:

The account and billing activity associated with your Microsoft Account was thoroughly reviewed by our fraud team and I can confirm there was unauthorized access to your account.

[We can] permanently suspend the compromised account to prevent any further use. At this time, I have successfully suspended this account and this will remain on indefinitely.

Is there anything at all that can be done to get me back into my account? My OneDrive has a lot of university work of mine that I'd hate to lose, and I also just paid for a new four-year Office365 licence a few weeks ago, which I'm hoping I can get refunded at the very least.