IT Help Guide
Microsoft 365 Account Compromised.
A suspected Microsoft 365 compromise should be treated as a security incident, particularly where suspicious forwarding, sign-ins or sent mail is present.
What to check
Reset the password, revoke active sessions, review MFA methods, inspect sign-in logs and mailbox forwarding/rules, and investigate whether other accounts or data were affected. Preserve evidence before removing suspicious configuration where possible.
When to get IT support
If the issue affects multiple users, keeps returning, risks business data or you are unsure about the security impact, stop repeated trial-and-error and investigate the underlying cause.
Need IT support that just works?
Tell us what is slowing your business down. We’ll explain the practical options in plain English, with no obligation.