Businesses, especially large ones, usually have more than one department registering new domains. In theory, the people who register a site are responsible for it, but those one-off chores can get eclipsed by more urgent tasks. Well before a registration expires, people might change positions or quit the job. An abandoned site might simply not seem like a pressing matter. And so they remain on an organization’s website until their registration expires and they go back on the market. What can go wrong? An abandoned website is actually rife with possibility for cyber criminal mischief. For one, people known as cybersquatters actively look for expired domain names. If they register such a domain name, they can do anything they want with a site that is affiliated with your company. These days, they will likely try to extort money by putting content on the site that can harm your business’s reputation, or sell the domain name on the Darknet to phishers. To prevent these and other predicaments, organizations can assign someone in IT or security responsibility for domain registration, set up automatic domain extensions (if your registrar allows it), and delete information from outdated websites. Kaspersky Lab.