How to Retrieve my confidential emails and access my business account

Dear @Legal Equity,

I understand how concerning it is to discover unauthorized access to your business account, especially when dealing with confidential legal communications.

To help you regain full control and retrieve your emails, please follow these immediate steps:

Step 1: Verify Your Account Recovery

Since you have already changed your password, the next step is to ensure that no "backdoors" were created by the unauthorized user.

• Check Forwarding Rules: Sign in to Outlook Web App, go to Settings (gear icon) > Mail > Forwarding. Ensure your emails are not being secretly forwarded to an external address.

• Check Inbox Rules: In the same Settings menu, go to Rules. Delete any rules you did not create (e.g., rules that move incoming mail to "Deleted Items" or "Archive").

Step 2: Force Sign-out of All Sessions

Even after a password change, some active sessions on other devices might persist.

• Go to your My Account Security Info.
• Look for an option to Sign out everywhere. This will terminate the session used by the IP address in Quebec and any other unauthorized devices.

Enable Multi-Factor Authentication (MFA)

This is the most effective way to prevent future unauthorized access.

• In your Security info page, select Add sign-in method and choose Authenticator app.
• This ensures that even if someone discovers your password again, they cannot enter your account without a code from your phone.

Step 3: Retrieving "Missing" Emails

If you cannot find specific confidential emails after the breach, they may have been moved or deleted by the intruder.

• Check your Deleted Items folder.
• If they are not there, click the link at the top of that folder that says, "Recover items deleted from this folder".

Official documentation for reference:

• Responding to a Compromised Email Account
• How to use Multi-Factor Authentication

If you are unable to log in at all or see a message that your account is locked, please contact your organization's global administrator to reset your MFA settings and unlock your profile. Please let me know if you require any further assistance.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".   

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.