Letting domains expire could be a major security risk...are you one of them?

[Kurt]

Just as an aside, when people have email forwarding and let thier domains drop it is a good idea to delete all of the emails and the forwarding 'before' letting the domain drop. Some hosts will tell us that dropped domains files are deleted. Not true in every case. It doesn't take much for a skilled server admin to harvest the data.

Think about all the domain names and third party email accounts that people let go and someone else snags. Set up a bot that checks the most popular/valuable online accounts and send in "lost password" requests and then check the email to see what accounts show up.