hijacked!

[Randy5]

What's the first thing you should do if you find your domain name has been hijacked?

[suwunk]

ICANN imposes a 60-day waiting period between a change in registration information and a transfer to another registrar; this is intended to make domain hijacking more difficult, since a transferred domain is much more difficult to reclaim, and it is more likely that the original registrant will discover the change in that period and alert the registrar. Extensible Provisioning Protocol is used for many TLD registries, and uses an authorization code issued exclusively to the domain registrant as a security measure to prevent unauthorized transfers

http://www.icann.org/announcements/h...rt-12jul05.pdf
You can take steps to protect yourself against a switch by locking down your account.