Hi TraitPlat,
I am so sorry to hear this happened to your son. It is incredibly stressful when a child's account is compromised, especially when they were just trusting someone they knew.
Since you already have an open case number (SIR23668631), the most effective next step is to force an escalation. Microsoft community agents can sometimes flag these threads, but you should also try these pathways immediately:
- Reach Out on Social Media: Post your case number publicly to @XboxSupport on X (formerly Twitter). Their social media teams are often much faster at routing hijacked minor accounts to senior enforcement squads.
- Submit the Official Compromised Account Form: If you haven't yet, fill out the dedicated Microsoft Account Recovery Form. Provide the original device IDs (console serial numbers) and billing information tied to the account to prove ownership.
- Secure the Device: Since your son ran a malicious file, the hacker likely used a session stealer. Run a deep malware scan using Windows Defender or Malwarebytes on his PC immediately, and clear all browser cookies/passwords, as the hacker may still have access to active login sessions.
I hope a Microsoft Agent steps in here quickly to escalate case SIR23668631 for your family.