If your Microsoft email account has been hacked and emails are missing, there are a few steps you can take to recover them. Since you mentioned that you have already recovered some emails with technical support, it's important to continue working with them for further assistance. Here are some common symptoms of a compromised email account that you should be aware of:
- Missing or deleted emails: If emails are missing, it could indicate that the hacker has deleted them.
- Suspicious activity: Look for any unusual actions in your account, such as changes to your contact list or new inbox rules that you did not create.
- Frequent password changes: If you notice frequent password changes or unexplained account lockouts, this may be a sign of ongoing compromise.
To recover deleted emails, you can check if they are in the Deleted Items folder or if they can be recovered from the Recoverable Items folder, depending on your organization's retention settings. The default retention period for deleted items in Exchange Online is 14 days, but it can be extended up to 30 days by administrators. If the retention period has not expired, you may still be able to recover them.
If you suspect that your account is still compromised, it is crucial to secure it by changing your password and enabling two-factor authentication if you haven't done so already.
For further investigation and recovery of your emails, please continue to work with Microsoft Support for tailored assistance based on your specific situation.
References: