Microsoft Permanently Locks Hacked Account After Security Changes, Erasing 25 Years of OneDrive Data and Purchases

A streamer named Joshua Kane lost access to his Microsoft account containing 25 years of digital files, family photos, and purchased content after it was compromised by an attacker who altered security settings. Microsoft confirmed the account belonged to him and had been breached but refused to restore access, citing internal policies that prevent manual recovery once security information is changed by an unauthorized party. The company stated that OneDrive content cannot be extracted due to its encryption architecture and privacy protections, leaving the data permanently inaccessible even to Microsoft engineers. Kane was advised to create a new account and repurchase games and services, while the incident quickly gained over two million views on social media and prompted other users to share similar experiences. The case underscores the risks of insufficient account protection and the permanent consequences of account takeovers when two-factor authentication and backup strategies are not properly implemented.

AntiMalwareTranslated from Russian

Read at source

A streamer named Joshua Kane has permanently lost access to 25 years of personal digital content after his Microsoft account was compromised. The attacker changed the account’s security details, allowing them to take full control and lock out the original owner.

Along with the account itself, Kane lost all files stored in OneDrive, including family photographs of his son as an infant, as well as years of purchased games, applications, and other digital services. Microsoft acknowledged that the profile had indeed been hacked and belonged to Kane, yet support staff refused to restore access.

According to the company, once an attacker modifies security settings, internal policies prohibit employees from manually returning control to the original owner. The lock has been declared permanent, and the associated files are now inaccessible even to Microsoft engineers.

The corporation further explained that content stored in OneDrive cannot be extracted because of the service’s encryption architecture and strict privacy protections. Kane was told to purchase his games and services again on a newly created account.

The story rapidly spread across social media, with Kane’s post receiving more than two million views within 11 hours. Numerous other users began sharing comparable cases of permanent account loss following similar takeovers.

While Microsoft’s formal rules allow account suspension when fraudulent activity is suspected, the temporary measure can easily become a lifetime ban once an attacker updates recovery information. Kane himself admitted that he had not adequately protected the account.

The incident serves as a stark reminder that two-factor authentication is essential and that storing the only copy of important files in the cloud does not constitute a true backup strategy. Unlike a physical device, cloud storage cannot be stolen with a flash drive, yet a single successful compromise can permanently sever the owner’s access.

Meridian digestThe week's most consequential security stories, distilled into one briefing.See the digest

More in Fraud & Social Engineering

Scammers Use *#62# USSD Command to Fabricate Surveillance Claims and Steal Victims' Funds
Aroshka Cloud Faces Scrutiny Over Alleged False Claims of SOC 24/7 Operations and High-End Infrastructure
Reports Surface on Alleged De-Anonymization of Admins Running Major Russian Hacker Forums