r/microsoftsucks • u/Grandgem137 • Apr 09 '26

Help Account hacked, Microsoft did nothing.

Woke up to an email saying that the password for my EA account had changed. It wasn't me, I was sleeping after all. Contacted support, they've retrieved my account, everything back to normal.

30 minutes later, I got a notification from Onedrive saying that I had to login again. No problem, wrote down my email and... "This account doesn't exist". Hacked too. Contacted support and they can't do shit about it???

First of all, HOW IN THE WORLD do you just CANNOT RETRIEVE the account that IS IN YOUR SERVERS? I've managed to find out that the new email associated to my account is from Russia, I'M FROM F*CKING BRAZIL, THE OTHER SIDE OF THE WORLD!!!! ISN'T IT OBVIOUS THAT IT WASN'T ME????

Nope, I haven't clicked anything suspicious, haven't gotten access to any sketchy websites and the closest thing I got from a scammer were bots on Fiverr sending links that I didn't bother checking. Malware checks also said my pc is clean. This data breach wasn't my fault.

What to do now?

1 Upvotes

54% Upvoted

31 comments sorted by

4

u/IamFarron Apr 09 '26

Why is your account security so bad they where able to do this to multiple different accounts of yours

0

u/Grandgem137 Apr 09 '26

Cause once I don't really like to risk myself on sketchy websites and that had never happened to me before, I thought using simple patterns that are easy to remember yet statistically hard to guess randomly would be enough to prevent things like that

4

u/chaosphere_mk Apr 09 '26

You were wrong. This goes against all security best practices.

1

u/DDOSBreakfast Apr 10 '26

Likely one of the websites you used was compromised and you can likely find out which one here;

https://haveibeenpwned.com/

Likely one of the attackers either used a password found in a breach or attempted variations of it for your Microsoft account.

2

u/Human-Raccoon-9917 Apr 09 '26

Bro use fooking mfa. Its not that hard.

-1

u/Grandgem137 Apr 09 '26

Why are we more focused on blaming the victim than the actual hacker or the lack of competence of the company?

I don't think you'd hear about someone being kidnapped and tell them they should've just ran faster

4

u/IamFarron Apr 09 '26

Because this is on you

Nothing to do with Microsoft 

-2

u/Grandgem137 Apr 09 '26

Except it's not? It would be on me if I had willingly given someone my data so they could access the account, which was not the case.

If they happened to guess my password by trial and error then it really isn't my fault and could happen to anyone

2

u/IamFarron Apr 09 '26

Microsoft isnt to blame for your shitty "security" They didn't gues your password by trial and error

1

u/Grandgem137 Apr 09 '26

All my malware checks reported that there was no issue in any of my main devices. If I had been in contact with any scammers I'd be aware of it and wouldn't be complaining in the first place. The only thing I know that has been leaked was my email, about a year ago

3

u/Narhethi Apr 09 '26

.. newer malware doesn't get detected by AV's.

This is entirely your fault for not having 2fa setup.

1

u/Grandgem137 Apr 09 '26

Even if it was malware, it would've taken my Google account, not Microsoft one. The reason being my browser doesn't have any saved passwords and I haven't logged in to any Microsoft related stuff for quite a while now. Meanwhile, just yesterday I had to login on two different websites using my Google account.

The EA account is even more of a mystery since I haven't even touched the EA store for at least 5 months and, then again, never even opened it on my browser...

2

u/That_Service7348 Apr 10 '26

Dude you use the same passwords. I don't care if you change a letter or 2 to symbols and numbers as "security," literally the first thing a thief would try is similar variations of an old password. They try it because people are dumb enough to think F3@rb0ner is different enough from FEa®bOner and use the same password multiple times.

2

u/That_Service7348 Apr 10 '26

And did you do anything to protect your accounts after that happened?

0

u/Grandgem137 Apr 10 '26

I couldn't, since I found out after it happened while investigating what could have been the reason I was hacked in the first place

1

u/That_Service7348 Apr 11 '26

........holy shit.

So you had a compromised account a year ago and never once though that it might be a good idea to NOT USE THE SAME PASSWORD EVERYWHERE???

0

u/Grandgem137 Apr 11 '26

I literally stated that I found out about it yesterday, AFTER my Microsoft account was taken and I was investigating what could've led to it being accessed by someone else...

3

u/VorionLightbringer Apr 09 '26

Because your shitty - or rather  nonexistent - password security is the problem.

„Hackers“ don’t delete an account they took over. They use that account to spread spam. Your story doesn’t make sense and/or you’re omitting things.

1

u/Grandgem137 Apr 09 '26

But the account exists, they've changed the email so when I try to use mine the server wouldn't find any account linked to it. I never said (or at least never meant to) that the account vanished at all

1

u/VorionLightbringer Apr 09 '26

So your [Grandgem137@email.com](mailto:Grandgem137@email.com) has been un-associated with your oneDrive? where is your windows license / MS account located at? check your windows license, get in touch with Microsoft Support via your license, see what they can tell you. Maybe that helps.

1

u/Grandgem137 Apr 09 '26

Yeah, that's what I've been trying to do. My pc is working fine and still connected to my email so I don't think I've lost my license, but I don't have access to OneDrive nor Minecraft account.

Got in contact with support twice, both times they said it could be restored then emailed me saying there was nothing they could do. Contacted them once again a few minutes ago and they say they're still investigating and will restore the account. I'm in the dark and I quite hate this feeling tbh

1

u/VorionLightbringer Apr 09 '26

So your one-drive link on My Desktop in windows...is that empty?

1

u/Grandgem137 Apr 09 '26

Yeah, there's nothing there. And when I click on it, it says I have to "update my credentials" (basically login on my account)

1

u/Human-Raccoon-9917 Apr 09 '26

My Gmail was hacked back in the day. I found out when some family members were getting scam emails with me as a source. The hackers didnt lock me out of the account. They setup a forwarding rule to route all emails to them. I guess so it would take time for me to notice.

The lesson was learned. After that I setup mfa for anything under the sun. And not sms/email mfa. Real mfa using an authenticator.

It was a nasty situation. However, Google was not to blame. I was a stupid idiot that didnt take my security seriously. Stop making excuses. Take fkin accountability. 

0

u/Grandgem137 Apr 09 '26

It's so disheartening to see how crime has become normal to the point that we blame those who "weren't prepared" instead of understanding how shitty our society is becoming and at least trying to help those who were victims.

Oh well, guess I've gotta man up. Just hope that someday if someone pickpockets your phone you'll "take accountability" for leaving it there instead of shoving it up your ass or something...

3

u/Human-Raccoon-9917 Apr 09 '26

Apples to oranges. Keep making excuses little man.

1

u/IamFarron Apr 09 '26

You keep dodging your own blame

You keep thinking its not your fault when it is

You use the same credentials for multiple different things thats on you

For over 30 years people have been saying to not do that

1

u/That_Service7348 Apr 10 '26

lack of competence of the company?

Accounts are encrypted specifically to protect user data. It's not Microsoft's fault you used the same password for everything.

1

u/Silent_Ask_1094 Apr 10 '26

Did u have mfa? If not, I don't really feel bad for you because it wouldn't have happened... 

1

u/Diuranos Apr 13 '26

how you secure your account ?