In a subdomain squatting attack, the attacker claims the namespace of the de-provisioned resource, effectively moving into the space you left vacant. In this case, they might scan your DNS entries for any dangling subdomains and register the (now abandoned) username example-blog on medium.com.