Since stolen subdomain resources are accessible under your domain, any malicious website they host on their stolen subdomain may be able to steal cookies from your web traffic, or server malware under your certificate.
