A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
If this is a personal Microsoft account (Outlook.com, Hotmail, Live, Xbox, OneDrive, etc.), the unauthorized passkey changes and the message saying that Microsoft cannot find the username are consistent with a possible account takeover or change to the account's sign-in information.
Since you still have the original Microsoft security emails, keep them as evidence and do not delete them.
I recommend the following:
Use Microsoft's official Sign-in Helper first to determine whether the original username/alias is still recognized.
If you cannot sign in, use Microsoft's account recovery form and provide as much original account information as possible.
Try the recovery process from a device and location you normally used to access the account.
Do not provide your password or verification codes to anyone claiming they can recover the account for you.
If you still have access to any Microsoft service that is signed in with the affected account, immediately review the security information and sign-in activity.
If the account contains important OneDrive, Outlook, Xbox, or other data, mention the unauthorized security changes and the approximate date they occurred when submitting the recovery request.
If this is instead a work or school Microsoft account, do not use the personal-account recovery process. Contact the organization's Microsoft 365/Entra administrator. The administrator can investigate authentication methods, sign-in activity, and audit logs and can help restore access.
The distinction between personal and work/school accounts is therefore important before recommending a specific recovery procedure.