My Dad’s Facebook just got owned. He had an old email publicly linked to the account on a domain he let expire.

Hacker bought the domain, set up the old email address, and walked right through the front door.