I am not sure if i get you right, what do you mean by the email address expired?
Are you trying to say the hacker got hold of your old email address you used to register the account?
I think he meant that he stopped using the email, maybe the purpose of creating the email was accomplished and Op abandoned it and the hacker picked it up. This is why it is advisable to have a separate email for the forum your private or work email.