We contacted his bank (Chase) and reported the Skype charges. I then attempted to regain access to his Microsoft account and after several attempts, was able to re-gain access for less than an hour and the hacker discovered my login and quickly set up 2 factor authentication which locked us back out.

