microsoft are the worst when it comes to this. one of my accounts got hacked and they changed the email on it, and microsoft’s response to me was: yep, that sure happened👍 we’re going to permanently delete the account and not refund you for anything you’ve bought