I saw a question a few days ago that talked about if a domain is bought by someone else then would the emails to that domain be compromised. And it got me thinking about google gsuite and specifically the use of the services like gmail, files, and photos.
Say my domain.xyz which is registered with gsuite expires and someone else buys it. If I remember correctly the administrator password of gsuite can be reset by using a DNS txt record on the domain. If someone else owns the domain now he can easily reset the administrator password.
With administrator access the new owner or lets say the intruder could easily have access to ALL USERS email/files/photos/etc in my company by resetting the passwords.
My question is:
- Is my observation correct?
- If it is, will the new owner of the domain get access to my entire companies or all employees files/emails in gsuite? Or will google clear everything?