Are these memos redacted in some way? Would there be a separate diligence memo or is this the sort of final summary on why an investment would be made?
You would think so but feel free to try a reset / recovery at live.com and you will see that this is their standard form. That's what is so absurd -- change an email with no verification, but require next-level verification for the original owner to secure the account.
In messaging with support, they advised that the system would 'automatically' identify the account as compromised and eventually block it. This doesn't seem that likely so I will ping them again in a few hours.
Were you worried at all about the culprit using the access to figure out other accounts? My account had a balance so I assume it had some old credit card info in it or something similar.