How to fix Account hacked with Two-Step-Verification on

If your account has been compromised despite having two-step verification enabled, here are some steps you can take to regain access:

1. Reset Your Password: If you can access your account recovery options, reset your password immediately. Use a strong and unique password that includes upper and lowercase letters, numbers, and special characters.
2. Check for Additional Verification Methods: If your phone verification method is not working, see if you have other verification methods set up (like email or an authenticator app). Try using those alternatives to sign in.
3. Revoke User Access: If you suspect that your account is still compromised, revoke access to any active sessions. This can usually be done through your account settings or admin portal.
4. Enable Multifactor Authentication (MFA): If not already enabled, set up MFA to enhance the security of your account. This will add an additional layer of protection.
5. Contact Support: If you are unable to regain access, consider opening a support case with Microsoft for further assistance.
6. Monitor for Suspicious Activity: Keep an eye on your account for any unauthorized activity and report it immediately.

For more detailed guidance on handling compromised accounts, you can refer to the following resources.

References:

• Respond to a compromised cloud email account
• Secure and Restore Email Function to a Compromised Microsoft 365 Mail Enabled Account
• Remediate a Compromised Account