So my little brother (child) managed to fall for a phishing scam and got his Microsoft / Minecraft account stolen by some scumbag, and the recovery process has been denied by Microsoft. We provided previous passwords, address where it had been used, last 4 digits of a card used to make purchases...
Source: [Hacker News](https://news.ycombinator.com/item?id=49450625)