A Stranger Took Over My Subdomain After I Canceled an App

Google emailed me this morning to say a stranger had been added as an owner of one of my subdomains. I went to look and found an Indonesian gambling site sitting on my domain. Nobody hacked me, I just left one DNS record behind in August, and that was the only thing they needed.