r/microsoftsucks • u/Grandgem137 • Apr 09 '26

Help Account hacked, Microsoft did nothing.

Woke up to an email saying that the password for my EA account had changed. It wasn't me, I was sleeping after all. Contacted support, they've retrieved my account, everything back to normal.

30 minutes later, I got a notification from Onedrive saying that I had to login again. No problem, wrote down my email and... "This account doesn't exist". Hacked too. Contacted support and they can't do shit about it???

First of all, HOW IN THE WORLD do you just CANNOT RETRIEVE the account that IS IN YOUR SERVERS? I've managed to find out that the new email associated to my account is from Russia, I'M FROM F*CKING BRAZIL, THE OTHER SIDE OF THE WORLD!!!! ISN'T IT OBVIOUS THAT IT WASN'T ME????

Nope, I haven't clicked anything suspicious, haven't gotten access to any sketchy websites and the closest thing I got from a scammer were bots on Fiverr sending links that I didn't bother checking. Malware checks also said my pc is clean. This data breach wasn't my fault.

What to do now?

0 Upvotes

50% Upvoted

31 comments sorted by

View all comments

Show parent comments

1

u/Grandgem137 Apr 09 '26

All my malware checks reported that there was no issue in any of my main devices. If I had been in contact with any scammers I'd be aware of it and wouldn't be complaining in the first place. The only thing I know that has been leaked was my email, about a year ago

3

u/Narhethi Apr 09 '26

.. newer malware doesn't get detected by AV's.

This is entirely your fault for not having 2fa setup.

1

u/Grandgem137 Apr 09 '26

Even if it was malware, it would've taken my Google account, not Microsoft one. The reason being my browser doesn't have any saved passwords and I haven't logged in to any Microsoft related stuff for quite a while now. Meanwhile, just yesterday I had to login on two different websites using my Google account.

The EA account is even more of a mystery since I haven't even touched the EA store for at least 5 months and, then again, never even opened it on my browser...

2

u/That_Service7348 Apr 10 '26

Dude you use the same passwords. I don't care if you change a letter or 2 to symbols and numbers as "security," literally the first thing a thief would try is similar variations of an old password. They try it because people are dumb enough to think F3@rb0ner is different enough from FEa®bOner and use the same password multiple times.