I had similar happen with my XBox Live account seven years ago: the attacker bought $125 in Microsoft Points using the associated credit card and then immediate

I had similar happen with my XBox Live account seven years ago: the attacker bought $125 in Microsoft Points using the associated credit card and then immediately transferred the account to Russia under a new email address. At the time, Microsoft's customer service told me it was impossible for them to return accounts that had been moved internationally. They claimed that they literally didn't have the technical ability to do so, but that they'd file a ticket with engineering. I figured the account was gone. To my great surprise, three months later I got CC'd on an email from an engineer closing the ticket, followed by an email from Microsoft customer support with temporary account credentials to reclaim the username. And... that was that. No further follow-up, just "we fixed the system, and now we can transfer your account back to you."