Virginia health agency sues to reclaim expired WIC domain

A domain once used to direct visitors to Virginia’s Women, Infants and Children (WIC) nutrition program now forwards to adult entertainment sites, prompting a lawsuit from the state’s health department. The incident underscores the operational and reputational risks of expired domains tied to public services, particularly when they serve vulnerable populations.

What happened

The Virginia Department of Health (VDH) has filed an in rem lawsuit against the domain name VirginiaWIC.com in the Eastern District of Virginia. The domain, which the agency had used since 2018 to redirect visitors to its official WIC program page on virginia.gov, expired earlier this year after the employee responsible for renewals left the department. Without active oversight, the domain lapsed and was registered by a new owner, who began forwarding traffic to adult content sites.

WIC programs provide nutrition assistance to low-income pregnant women, new mothers, and young children. The VDH lawsuit describes the current use of the domain as "especially troubling" given its target audience, noting that visitors—many of whom may be seeking critical health services—are instead exposed to explicit material. The state is represented by law firm Dunlap Bennett & Ludwig in the case, which names Verisign, the registry operator for .com domains, as a necessary party due to its role in domain administration.

Why it matters

The case highlights a recurring vulnerability in government digital infrastructure: the risk of domain expiration when oversight is disrupted. Unlike private-sector organizations, public agencies often lack automated renewal systems or centralized domain management, leaving critical online assets vulnerable to lapses during staff transitions. Once a domain expires, it can be registered by third parties and repurposed for unrelated—or harmful—content, as seen here.

For government entities, the stakes extend beyond operational disruption. Domains tied to public health programs, emergency services, or social benefits carry an elevated risk of reputational damage if misused. In this instance, the VDH’s lawsuit argues that the domain’s current use could deter eligible participants from accessing WIC services, potentially undermining the program’s public health goals.

The legal strategy—an in rem action against the domain itself—reflects the challenges of recovering expired domains through traditional means. By suing the domain directly, the VDH avoids the need to identify or serve the anonymous registrant, instead relying on the court’s jurisdiction over the .com registry’s physical location in Virginia. This approach is not uncommon in domain disputes but can be time-consuming and costly compared to proactive renewal practices.

What to watch

The outcome of the lawsuit may set a precedent for how government agencies approach domain recovery in cases of inadvertent expiration. If successful, the VDH could regain control of VirginiaWIC.com and restore its original redirect. However, the case also serves as a cautionary example for other public-sector organizations, particularly those managing domains tied to sensitive services.

The incident may prompt renewed discussion about the need for specialized policies or tools to protect government-owned domains. While registrars and registries offer services like domain locking and expiration alerts, these are not universally adopted in the public sector. The VDH’s experience could accelerate efforts to standardize domain management practices across state and local agencies.