Originally Posted by fluffygrrl

Thing is, there doesn't exist a way to steal domains.

Without exceptions, stories like this are due to compromised accounts. There's many ways that could happen. The email you use was compromised (you logged on from an internet cafe and didn't log out PROPERLY. your password is "newyork". you are running a malicious keylogger. etc). You had cookies from a https session and went and visited a malicious website which read them. You use wireless and somebody sniffed your traffic. You're on badly admined cable and somebody sniffed your traffic. You fell for a phishing scam. The list is endless.

In the end, there's nothing the registrar can do for you, nor is there anything they should do for you. Not because it's not unfortunate, or we're not sorry, or because this sort of thing should happen.

It shouldn't happen. But it's your responsibility.