One of our domains was just hijacked... and I'm not sure how they did it. It was registered at yahoo (waiting to closer to renewal time to be transferred into our regular accounts) and the login there does not appear to have been compromised. The 1st notice was the "your domain has been transferred" email. The best part is, I can't seem to send a support ticket in to yahoo as (because the domain was moved out) there are no purchased services with the login. Uh, yeah I did purchase services and Yahoo transferred the domain away.

I have a ticket in with eNom and DemandMedia.com... but has anyone else gone through this? What's the proceedure?

If you registered it through yahoo you will most likely have to show proof of ownership. If you can not, the person who took it will get to keep it.

Bought with a credit card... and in the email archives they'll be a copy of the registration email. Just kind of a pain... fortunately it's not a high volume site. I don't get how yahoo transferred it with the authorization email, and the domain supposedly locked.

I'm curious to see what you turn up. It does seem very odd.

Very odd indeed.
If you didn't reply to the transfer request or you denied it how could there be a transfer?
I'm not familiar with how Yahoo does things but any registrar I have ever dealt with I don't think would allow an unauthorized transfer.

I wish I could be more help in this situation, but I have never bought a domain off yahoo. I hope this gets resolved soon.

I have never purchased a domain from Yahoo, so I can't be of much help to you.
Not sure how the domain could have been transferred if it was locked and had a valid administrative contact email address which was under your control.
I can only suggest that you change your registrar account passwords immediately and verify the administrative email addresses for all your domain names, just to be on the safer side.
Hope you get this resolved.

This set me thinking about the best practices for securing a domain and I did a few searches.
Maybe this article will help others too - I found it informative.

I think you should contact Yahoo support team because it was registered at yahoo!

I'd love to... and tried with the same thinking you had. However, Yahoo Small Business support is only available to customers. And they no longer consider us a customer as the domain was transferred away. We bought the domain and it was already there... There's a reason I won't register one there...

One note of update - eNom support (the new registrar and owned by Demand Media - the name on the account now - think it's a private registration but not positive) said that department can't deal with it but are refering it to the 'risk management' department.

Maybe it'll get somewhere... who knows.

Lets hope enom takes care of it...

I know yahoo has its issues (grrr still random blacklist emails for no reason grr) but this seems kind of crazy. Keep us posted on this, I would like to hear more about it.

Got a canned reponse so far...

Sound good you got response, just Keep us updated.

Are there any updates to your situation so far?

Finally heard something (not much)...

But I now have an actual person to work with... so some hope there.