Why was I forced to change passwords on all accounts before I could access them?

K LaRue 0 Reputation points
2025-12-06T16:25:10.1333333+00:00

Using Chrome. Got the error the account was an organizational account. In order to access the account I had to recover and change password. Did Microsoft get hacked on 12/5/2025?


Moved from: Microsoft Security | Microsoft Identity Manager

Moved from: Outlook | Web | Outlook.com | Account management, security, and privacy

Moved from: Outlook | Web | Outlook on the web for business | Security

Outlook | Web | Outlook.com | Account management, security, and privacy
0 comments No comments
{count} votes

3 answers

Sort by: Most helpful
  1. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.


    Comments have been turned off. Learn more

  2. Jade Ng 6,390 Reputation points Microsoft External Staff Moderator
    2025-12-08T01:59:15.2666667+00:00

    Dear @K LaRue,

    Good day. Thank you for posting your question in the Microsoft Q&A forum!

    For better assist, please kindly let me know some information:

    • Are other users in your organization experiencing the same issue?
    • Could you confirm if you have tried signing in from a different device or browser (e.g., Microsoft Edge) and whether the issue still persists?

    In this case, please kindly reach out to your IT admin to access Microsoft Entra Admin Center and implement the following steps:

    1. Sign in to Microsoft Entra Admin Center.
    2. In the left navigation pane, select "Users".
    3. Under "Password reset", choose "Registration".
    4. Set Require users to register when signing in? to Yes.
    5. In "Number of days before users are asked to re-confirm their authentication information", enter 180 (or a value as required).
    6. Click Save to apply the changes.

    User's image

    For reference: Enable users to unlock their account or reset passwords using Microsoft Entra self-service password reset

    Note: Please note that our initial response does not always resolve the issue immediately. However, with your help and more detailed information, we can work together to find a solution.   

    Your understanding and co-operation are highly appreciated. I am looking forward to your response!


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".   

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


  3. Victor1-V 2,615 Reputation points Microsoft External Staff Moderator
    2025-12-10T13:52:57.38+00:00

    Dear K LaRue

    I am following up on your issue. 

    Thank you for getting back to us and taking the time to clarify that this issue is occurring with your individual Microsoft Accounts and your husband's account, despite the error message stating it's an organizational account. 

    This behavior where a personal MS account is incorrectly flagged as organizational, forcing a password change is unusual, and I need to investigate it further as it seems to be affecting you and your friend across different Windows versions (Win 10 and Win 11). 

    To better understand and investigate this incident, I may need some more detailed information from your side so that I can narrow down the issue in the right way: 

    1. Could you please confirm the domain used for your affected accounts? (For example, are they ending in @outlook.com, @hotmail.com, @live.com, or is it a custom domain that you use for your business?). Please only provide the part after the "@" sign (the domain), and do not include the full email address. 
    2. Are you using a specific Microsoft service (like Outlook.com, OneDrive, or Teams Free) when this error occurs, or does it happen when you try to sign into the core Microsoft Account portal (account.microsoft.com)? 
    3. You mentioned that after clearing the cache, you received a "different login error." Could you please recall and provide the exact wording of that error message or any associated error code, if possible? 

    In the meantime, as a general security best practice, especially since you had to perform forced password changes, I recommend ensuring Two-Step Verification (2FA) is enabled on all your personal Microsoft Accounts. This adds an extra layer of security, making it significantly harder for unauthorized users to access your account even if they know your password. 

    Thank you for taking time researching the issue and trying the initial steps. Your patience and cooperation are highly appreciated as we look into the root cause of this incident. 


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.