Within the last hour I got emails from PayPal and Microsoft that 18,000 MS points were bought (to the tune of $291), another email address was added, and my account's region was changed from Canada to Russia.
I've cancelled the second email address addition and changed my Xbox Live password. I'm going to call Microsoft in half an hour on my lunch break.
In addition to PayPal, there's a credit card on the Xbox account. But in my account, when I click on Управление способами оплаты (Managing payment methods) (yes everything is in Russian now), this message says Способы оплаты не зарегистрированы (Methods of payment are not registered). I'm hoping that's one piece of good news...?
Is there anything else I can do right now? Sorry if this confused, I'm a little panicked right now.