Recover Hacked iCloud & Pokémon Accounts

My iCloud email and the linked Apple ID were recently compromised and the attacker has also taken control of my Pokémon Go profile. I can no longer sign in to either service and, unfortunately, I have lost access to the phone number and recovery email that were on the Apple ID. What I still have: • old emails, screenshots and other account details that show ownership • a device that was previously signed in to the same Apple ID • a friend who can vouch for my original ownership Your task is to guide me through—or directly handle—the full account-recovery process with Apple and Niantic, restore my access, and secure both accounts with new credentials and two-factor authentication so this cannot happen again. Acceptance criteria • Successful log-in to my iCloud/Apple ID on at least one device I control • Confirmation from Niantic that my Pokémon Go account is back under my email, with all progress intact • Clear, step-by-step summary of every action taken and any future steps I should follow to keep the accounts safe