Would it be possible to search inactive accounts of 6+months and automatically remove the recovery email attached to them? That's how most of the accounts have been recovered of recent and in the past, which has lead to countless hackings and scams.
I think these past two weeks alone ~ 20 inactive semi reputable accounts were recovered and used to scam.
Hotmail is terrible, and gets exploited frequently - An exploit was made known a few weeks ago, and hence a high chance that these hacked accounts are due to that.
I know it would be a pain in the ass for Staff if these members did come back, and tried to regain control of their accounts... however I'm sure the staff can handle a few recovery threads if those users return.
This is all theory, there is no definite way to know that the accounts are getting recovered due to the exploit, however it's by far the most plausible at this point.
