Microsoft Account Stolen

Hello. Two or three days ago, a hacker managed to change the email address associated with my Microsoft account and added an authenticator app—all without any security codes being triggered. The password was also changed. I am currently unable to access the account, and I cannot reset the password. Furthermore, I am receiving no response to my account recovery form submissions. How is it possible for someone to add a new email address and an authenticator app to my account without any security codes, especially when my payment methods and games are linked to it? Also, why are the forms left unanswered for days on end? It’s absolute nonsense.