Guys, do yourselves a favor and setup the 2-step verification feature on your Microsoft accounts, if you haven't already.
My account (and PayPal account) was compromised on Tuesday night, nothing came of it. I changed all of my passwords and moved on.
Thursday night it was breached again. This time, the guy purchased $800 worth of in-game currency - charged to my PayPal account. Had I setup the 2-step feature, this likely wouldn't have happened.
TL;DR: There are plenty of scammers and fat kids out there. None of us are safe. Set up risk mitigation measures!
P.S. The asshole left everything he purchased on my account...
