Definitely! A while back Yahoo! purged a ton of addresses and allowed individuals to signup with them to get unique/clean email handles.
I was able to grab myfirstname@yahoo.com. The address looks neat.
Since I’ve had that address, I’ve received password reset emails, bank documents, airline tickets and what not.
Massive security hole is an understatement.