As part of a large-scale privacy investigation, I have bought more than 100 domain names previously belonging to social welfare and justice institutions in Belgium. What I observed was unsettling.
Damnnn. What I don't understand is why the old accounts still exist, they should've changed the accounts to use the new email address. Also, they should've thought to buy up the old domain and redirect it to the new domain so nobody can use that for malicious purposes.