Dutch streamer Joshua Khane had his Microsoft account since the original Xbox launched around 2001. Twenty-five years of digital games. Thousands of euros in purchases. Baby photos of his son stored on OneDrive. On July 14, 2026, he reported all of it gone—wiped after a hijacker seized the account and Microsoft permanently closed it. The timing couldn’t be worse: Sony just announced it will stop manufacturing physical PlayStation discs by January 2028, and Microsoft’s next console, codenamed “Helix,” is expected to go disc-less by 2027 or 2028.
What Actually Happened
A hijacked account, a permanent closure, and no path back to thousands of euros in games or irreplaceable family photos.
A hijacker changed Khane’s security credentials on his account, active since the original Xbox era; Microsoft responded by permanently closing it and directing him to repurchase his entire library on a new profile. OneDrive recovery was ruled out—Microsoft cited encryption—though Khane acknowledged he had not enabled two-factor authentication.
Microsoft’s own documentation states OneDrive data is retained roughly 30 days after account deletion, with recovery possible for up to 93 days in some configurations. After that window closes, the encryption keys go with it. “The data is permanently deleted,” according to Microsoft’s support guidance. The window is short. The loss is permanent.
A Brazilian user facing the same “unrecoverable” automated response from Microsoft sued—and won. The court ordered full account restoration plus roughly $400 in damages, despite Microsoft contesting the case aggressively. Whether Khane could pursue similar remedies under Dutch consumer law remains unclear.
The Part Nobody Wants to Talk About
As the industry kills the disc, your entire gaming library lives or dies with your login credentials.
Your digital game library is functionally a Spotify playlist you paid full price for—it exists only as long as the platform decides it does. Sony’s disc decision has already sparked lawsuits in the Netherlands and Mexico. Microsoft is reportedly testing disc-to-digital license conversion with Xbox Insiders. To be fair, closing a compromised account is a legitimate security response. The problem is what comes after: a shrug and a suggestion to start over.
Khane skipped 2FA. That’s on him. But Microsoft’s recovery infrastructure treats a quarter-century of purchases and a parent’s baby photos with the same disposability as a forgotten Hotmail inbox. Both things can be true simultaneously.
- Enable passkeys or 2FA on every account that matters to you.
- Back up irreplaceable photos to a second service or a local drive.
The disc-less future is already here—and the only backup plan is yours.
