Microsoft Deleted a Hacked User's 25-Year Account, Then Told Him to Buy His Games Again

A hacked account should be a recovery problem. Microsoft turned it into a permanent deletion, then told the owner to buy everything again. This is the digital ownership trap in its purest form.

On July 14, 2026, Dutch Twitch streamer Joshua Khane (@JoshuaKhane) posted a screenshot that has since passed 75,000 likes. His Microsoft account had been hacked. The attacker changed the security details. Khane contacted Microsoft, sent screenshots of his transactions, the password change records, and everything else they asked for. Microsoft confirmed he was the real owner and that the account had been compromised.

Then they deleted it. Permanently. Along with the OneDrive attached to it.

What he actually lost

25 years of account history. The account dated back to 2001, the year the original Xbox launched.
Thousands of euros in digital Xbox games, built up over two decades.
His son’s baby photos and other personal files stored in OneDrive.
Any path back. Microsoft called the suspension “irreversible.”

The support email is the part worth reading closely. Microsoft said that because the account’s security information had been changed by the attacker, its policies would not let staff modify or reverse those changes. To prevent further misuse, it permanently suspended the account. On the OneDrive files, it said that because of encryption and privacy protections, even its own engineers cannot recover the data once the account is closed. Every file is encrypted at rest with a unique AES256 key, and those keys are themselves locked behind master keys in Azure Key Vault. Microsoft built the box so that once you are locked out, nobody, including Microsoft, can open it.

And then the line that set everything off:

If you used this account for Minecraft, we regret to inform you that the game cannot be recovered. A new purchase will be required on a newly created account.

Create a new account. Buy your games again. That was the offer.

Why the “buy it again” part matters

This is the whole argument about digital ownership in one sentence. If losing access to your account means you have to repurchase the games, then you never owned the games. You owned permission to access them, and that permission lived on a server Microsoft controls. When the account died, the permission died with it, and the only fix on the table was to pay a second time.

Microsoft did not offer a refund. It did not offer to move the licenses. It did not offer to freeze the account and investigate while Khane proved his identity, which is what you would expect from a company that had already confirmed he was the owner. It deleted the account and pointed him at the store.

The security reasoning does not hold up either. “We locked it to prevent abuse” makes sense as a temporary freeze. It makes no sense as a justification for permanent deletion of a verified owner’s data. A freeze protects the account. Deletion destroys it. Those are not the same action, and Microsoft chose the one that erased 25 years of a person’s life.

Yes, Khane admitted he had not turned on two-factor authentication, and that is a real lesson. Enable 2FA, use passkeys, and back up anything you cannot afford to lose. But 2FA is a lock on the front door. It does not change who owns the house. And as the next case shows, even 2FA does not save you.

This is not the first time, and the courts noticed

Days before Khane’s post went viral, a Brazilian gamer known online as Ordo_Liberal went through nearly the same thing. His Xbox account was locked after Microsoft claimed it was hacked, even though he had two-factor authentication switched on the entire time. Support told him to rebuy his digital library. He refused and sued.

On June 10, 2026, a court ruled in his favor. Microsoft was ordered to unfreeze the account, restore all purchases tied to it, and pay roughly $400 in moral damages, with penalties if it failed to comply within 15 days. Microsoft reportedly assigned 12 attorneys to fight one person over one gaming account, which tells you exactly how badly it wants to avoid setting a precedent.

The catch: Brazil has unusually strong consumer protection law, and Ordo_Liberal got a lawyer at no cost. Most people in most countries do not have that. The legal muscle Microsoft brings would be too much for the average person to take on. Winning was possible there. It might not be anywhere else.

The timing is not a coincidence

This blew up right after Sony confirmed it will stop producing physical PlayStation discs in 2028, tying every new purchase to a store account. Microsoft’s next console, codenamed Helix, is expected to go disc-free around 2027 or 2028 as well. Both companies want your entire library tied to a single account you do not control, and Khane’s account is a live demonstration of what happens when that account fails.

It fits a pattern I have been documenting here:

Sony deleted 551 movies people paid for when a licensing deal lapsed.
Microsoft has been remotely disabling software people paid for.
EA started putting ads in games you already bought.

Different companies, same structure. The thing you paid for lives behind an account or a server, and the company on the other end can switch it off, change the terms, or in this case erase it entirely.

My take

I have said it in other posts and this proves it again: I buy physical, and I do not tie anything I care about to a single account I cannot back up. Khane’s story is worse than the usual digital ownership complaint because it was not a licensing dispute or a policy change. He did nothing to trigger it except get hacked, then he proved who he was, and Microsoft deleted him anyway and told him to open his wallet.

The part that genuinely makes me angry is not even the games. It is the baby photos. A company that markets OneDrive as a safe place for your family memories built its system so that a security incident can vaporize those memories with no recovery, and then framed that as protecting your privacy. Protecting your data by permanently destroying it is not protection. It is a design choice that favors Microsoft’s liability over your life.

Telling a verified owner to create a new account and buy 25 years of purchases again is not customer support. It is a company admitting, out loud, that you were only ever renting.

Back up your data. Use 2FA and passkeys. Buy physical where you still can. And do not believe the word “own” on any digital storefront, because the moment something goes wrong, they will show you exactly how much you actually owned.