Microsoft locks hacked accounts permanently, erasing 25 years of user data

A Dutch streamer, Joshua Khane, found out how Microsoft handles account theft after losing 25 years of digital history in a single breach. According to correspondence he published on X, an intruder compromised his credentials and changed all secondary recovery methods. Khane admitted that he had not enabled two-factor authentication, giving the attacker full control.

Microsoft support investigated the incident and agreed that Khane was the legitimate owner and that the account had been hijacked. However, it still refused to restore access. Support agents explained that strict internal security protocols prohibit staff from altering or restoring accounts once security settings have been modified, describing the permanent block as a safeguard against fraud.

The consequences go far beyond a lost login. Support told Khane that all content tied to the account is permanently unrecoverable, including purchased games, Minecraft worlds, and personal photos of his son. The technical justification provided was account-level encryption: every file is encrypted with a unique AES-256 key, and access to the master decryption keys is severed alongside the blocked profile.

Instead of offering an escalation path, the company suggested he register a new account and re-purchase his lost software and services. Khane estimated his financial losses at thousands of euros. While Microsoft's service agreement allows suspending accounts on fraud suspicions until identity verification is complete, Khane said he was never given an option to prove his identity. The company has not commented publicly on the case.

Source: habr via X