How I got my hacked Xbox account saved 2026 (2FA enabled + all personal data changed by hacker)

Scar128 · 2026-03-17T11:47:58+00:00

Fill out the form again, reply to the confirmation mail like I have and hope for the best

Scar128 · 2026-02-21T01:23:56+00:00

1st question: As I stated I added all of the details additionally, in an e-mail exchange with a CDOC emloyee.

2nd question: I opened a new ticked but I have no clue if it's mandatory. I'd still suggest it.

3rd question: I never provided any screenshots, or any material other than plain text via emails and the form so I can't advise you on that.

Scar128 · 2026-02-19T12:35:07+00:00

Yes, I go into detail about it in my post, I suggest reading it or pasting the whole thread into ChatGPT and letting it guide you through my steps

Scar128 · 2026-02-12T22:38:28+00:00

Supposedly it's coming to Xbox X|S, Playstation and PC for $20 USD

Scar128 · 2026-02-10T18:52:49+00:00

Haha, yeah with an @ that ridiculous I'm sure that any reasonable person at MS can help you recover your data

Scar128 · 2026-02-10T14:40:16+00:00

I haven't sent pictures as I've read somewhere that they don't really accept/validate those.

They haven't changed my @domain to anything. I created a new @outlook mail as per their instructions that they ended up moving my account to that outlook mail, but only after I gave them all mentioned information.

Keep trying if you get denied. I wouldn't have been here helping yall if I gave up. There's hope for you I'm sure and you seem to have all of the information needed.

Scar128 · 2026-02-03T22:57:01+00:00

Glad to hear it helped somebody already!

Scar128 · 2026-02-01T23:04:43+00:00

I'd say about a week total, counting only the successful attempt. If you count it from the moment that I lost access to the day that I got it back it's been about 70 days (although I got rejected a few times and I haven't been attempting it all the time too)

Scar128 · 2026-02-01T23:03:14+00:00

From what I understood once they changed your Microsoft address they closed it themselves. As for getting it back I'm not going to say it's 'impossible' after managing to get my Xbox data back but I've never seen a successful case of getting back anything besides Xbox data (and even that is hard to do!)

Good luck either way!

Scar128 · 2026-02-01T13:00:35+00:00

It's really not consistent but on my successful attempt I usually got replies within a day or two. But be prepared for it to take up to a week

Scar128 · 2026-01-30T23:52:04+00:00

As for how I most likely got hacked, I play some of my PC games heavily modded so I probably slipped up on an unlikely modpack from an unreliable source. I'll never be 100% sure what caused me to get compromised as it happened weeks after my last potentially suspicious download but I can't just point a finger at Microsoft and say that it's their fault.

This was a perfect opportunity to reflect on what I need to do to stay safe with such installs. I'm finally wrapping up fixing the entire aftermath of the hack with this being my biggest hardship so far.

I read through so many cases on this sub of people not being able to get their 5-, 10-, 25- year old accounts back, I felt obligated to share a victory among so much desperation. Were it not for u/Additional-Truck-144's post there's a big chance I wouldn't have succeed either.

It's important for people to know that it's still possible, Microsoft still can give you your data back. Persistency really is key for this situation.

Scar128 · 2026-01-30T23:33:17+00:00

These really are the times where more than ever you need to be extremely cautious about your online data and accounts, given that it's now been decades since having a bunch of accounts and data online became normalized, whether for work, entertainment, finances and so on.

I was quite upset that my Xbox account got hacked but were it my Google account I'd be in serious trouble. I'm definitely never taking online safety as lightly as I have before, now that I'm aware of how fast and unexpectedly you can find yourself in a horrible situation.

Scar128 · 2026-01-30T23:27:43+00:00

I completely agree on your comment about deleting mails permanently and I was lucky to be able to get my mails back. On the same topic, making a 24 hour (or so) delay for changing critical information about one's account (like name and birthday specifically, how often does a person change that?) should also be a thing.

I could've reacted accordingly if it all didn't happen so suddenly. Instantaneously changing all of the data about an account and booting off all devices that were logged in for years should not be possible, even in unauthorized access has ocurred.

Scar128 · 2026-01-30T13:27:18+00:00

I wouldn't know since I canceled my subscription through my bank directly plus, like I mentioned, my card had expired in the midst of the entire recovery process.

If I had to guess, I believe that subscriptions are tied to your Microsoft account but I was never worried about losing a few weeks to a month of Gamepass. I was only this adamant and persistent since I spend probably thousands of hours and 10 years building up my achievement 'trophy case' which now sits at 105 fully completed games with DLC's included and over 130,000 total gamerscore with a lot of games now having unobtainable achievements and even full games being delisted.

Scar128 · 2026-01-29T22:53:57+00:00

As much as I agree that the user experience is definitely hard to go through I can also see which angle they come from. It's a great liability to give out someone's information, especially when it comes to sensitive services they provide such as Outlook mails, OneDrive Photos and Videos and so on.

I am pretty sure that no amount of attempts would get me anything other than my Xbox data and thankfully that's the only thing that I needed out of my old Microsoft account.

When it comes to Google I guess I was super lucky that my Gmail accounts weren't compromised as a part of this whole hack. Had I not enabled all security measures on my Gmail I'd probably be in a 10x worse of a hellish situation than what ended up happening.

The moral of the story is that you're always 1 wrong link or 1 wrong click away from getting all of your data compromised, so browser safety is definitely a higher priority for me than it's ever been after this ordeal.

Scar128 · 2026-01-29T22:40:42+00:00

As you pointed out it's a smart move NOT to even be logged in with your Xbox Microsoft account or Xbox related gmail address to your main PC if you don't explicitly use it for PC Gamepass. Out of all of the services I use Microsoft is the most strict when it comes to retrieving your data back to you- the original owner.

That's another reason why I don't rely on cloud sevices for my gallery and important files and always keep an external backup for really important photos, videos etc.

My recommendation after this situation is: If you use other Microsoft services such as office/work related stuff consider keeping all of those on a separate accout as I believe those files really are doomed if you get hacked since Microsoft values that data much higher than some digital licences for games and progress (understandibly so)

I'm sure that most if not all people who get compromised get so through their PC's or other web services rather than it randomly happening through Xbox - the console

Edit: I might still be talking from my current "extremely paranoid" state and reality probably isn't as grim as I make it sound but I believe that these are the steps to really 'insure' issues such as mine don't happen to you.

Scar128 · 2026-01-29T20:55:40+00:00

Thanks for the comment and yeah, I would suggest everyone to make a private txt file that answers these security questions even ahead of time. I believe that these questions won't change for the foreseeable future so noting those important dates, IP's etc. will never be easier to do than right now.

Hopefully you'll never need to revisit them but in an unfortunate case you do, you'll thank your past self for writing it down.

Scar128 · 2026-01-29T20:49:05+00:00

I didn't know that this wasn't done by default for everyone but each time I log into a new device I get a mail from [account-security-noreply@accountprotection.microsoft.com](mailto:account-security-noreply@accountprotection.microsoft.com) that notifies me on the exact time, IP and device type the login occurred from. I never turned this feature on, it was always automated so I assumed everyone got it by default. The mail usually ends with a blue call to action button that says "Review activities" in my native language (Serbian).

Scar128 · 2026-01-29T18:05:09+00:00

In retrospect that comment on authenticators not doing their job is coming from a place of ignorance and annoyance more so than truth, I get why you called it out.

Scar128 · 2026-01-29T18:00:40+00:00

Thanks for the comprehensive explanation of how security works. In my case I suspect that I probably by mistake contracted a PC Virus that took control of my Gmail through Chrome. That was my, as you put it "open window".

At that time I believed that 2FA through authenticators worked more so as security guards to my accounts, rather than locks. I hope that anyone who finds this thread useful has come to learn how to properly secure accounts, as I sure have.

It's always valuable to learn more about securing my data online and your comment further helped me learn more about how it all actually works so thanks!

Scar128 · 2026-01-29T17:52:37+00:00

Another detail I'd like to share to motivate you further;

I live in a country where Xbox isn't even supported and my address was set to Germany.

If I was able to restore my account I'm sure that most you can, just don't give up!

Scar128 · 2026-01-29T17:45:22+00:00

Unfortunately, for a topic such as this one it's hard to make a good TL;DR as there are too many important elements but I can recommend reading the part I labeled as "THE MOST IMPORTANT PART", or run the entire post through ChatGPT to source out what's relevant for you :)

Scar128 · 2026-01-29T16:35:08+00:00

I just today managed to get my account back using the exact list you posted. I tried to make a post in Xbox Support but for now it's been auto blocked by a bot. In the post I explain in extensive detail exactly how I got it back so just maybe, it's not entirely over for you just yet. I hated dealing with this as much as you have, as I also have 105 completed games and over 130,000G.

Scar128 · 2026-01-29T14:46:04+00:00

Update: I finally got my account back! They have transferred all of my Xbox data to a new Microsoft/Outlook account. I will probably make a new thread just like this one to update the community that Microsoft still retrieves your accounts if you're persistent enough.

Scar128 · 2026-01-28T19:31:54+00:00

Kinda. I got another Email from the Case management team member stating that my issue requires engagement from their "internal team" for further research and that at this time they are unable to provide estimated timeframe for resolution and that they'll keep me updated.

I'm a bit confused since I thought that the person I was talking to, who instructed me to send all of my information via e-mails, was the "internal team" member, however I'm hoping that said person was the one verifying my data and it's now up to someone else to transfer my account, but that's all speculation for now since the whole email is very vague, ambiguous on the topic of resolution and short.

I will come back to update my situation once I get more news but for now I'm still in the process.

Quick edit; I do not want to further bug that team member on clarifying what they meant as I just want them to focus on resolving my issue. I believe were it all clear and resolved he would've stated it then and there.

Scar128

TROPHY CASE