I'm wondering how this hacking business works. They buy the points with your CC, then buy the content, and even though they don't log in again with your account they can still use it because it was purchased on their console, right?
So can't you just go on xbox.com and revert the ownership rights to your console? Then they wouldn't be able to use any of it anymore. I mean I wouldn't do this until Microsoft has confirmed that they're not helping you since it would probably make them less inclined to do so, but that would be a nice little screw you to the thieves.
TBQH I'm not sure why the thieves didn't do that to you though. They had your password, you'd think the first thing they'd do is go on the website and revert all your ownership rights to their console, and probably change your password while they're at it so you can't get it back. I guess they figure the theft will be more likely to go unnoticed if they don't change anything on your end?
--
Black Turtle spilled my diet soda!