From here you can investigate what the attacker did, especially if you have a subscription to the full Microsoft 365 suite ...