My brother got his account stolen. Password changed, email changed, and even the phone number as well. (On him for not having 2FA)

Don't worry, outside of Steam, I reset passwords and set up 2FA so this weirdo can't hinder our "Getting him out of the account" process.

The support portal doesn't lead to it getting recovered, as we need access to this guys outlook account (which we obviously don't)

I sent an email to support@steampowered.com for help telling them the account handle, and that we had information to confirm he owns the account. Just wondering if this is correct, and if I just sit and play the waiting game.

If not, I'm obviously double checking any information here for legitimacy. I'm not giving any of you guys account information 🧍‍♂️