Hi I guess my hope from posting this thread is to find out what, if anything, you would do in my circumstances.... I swtiched broadband/phone providers in May 2017. I realised i would lose my 10 year old email address but was ok with this and went about trying to change all online account details which used the old address before the termination date. Then largely forgot about the old account. In December this year my airline loyalty account was hacked. After speaking to the airline they told me that the hacker had entered in my ID number and then used the forgotten password link to have an email sent to reset it. Once they reset the password they used all 100K airline miles up, spending them on e-vouchers. Even though the airline gave me the voucher numbers, an email account for the provider and told me that they hadnt yet been spent - the voucher company refused to cancel them and just copied and pasted their terms and conditions everytime i contacted them. The airline said that they had not been hacked - but my registered email address was the source of the issue. It was then i realised i had not changed the email address from the old cancelled account on this site. If ISP had deleted my email address when i left them it wouldnt have been possible. I did call the ISP and they said very sorry but they're not liable for third party losses and that was after 1 month of consulting their legal team. do i write this off as a very expensive lesson? Or should the ISP have deleted the email account when i left?