Experts have discovered a vulnerability in the registration of expired domains.

British security expert Ben Reyes reported that after registering an expired domain, he was able to access a user's Gmail account, calendar, and contact list.

Access to email and other web service data was obtained using Google Apps after Ben attempted to link a domain to his Google Apps account. The domain was linked to a different account.

After contacting support, Ben, based on the description,procedures, gained access to the website and a Gmail account. This account contained information with access to a number of other social services.