It happens more often than you might think: domains controlling other domains expire, companies merge, or people get sick or die. Not to mention, phishing is the #1 method.
The last time somebody did jail time for domain theft, it was also a case of picking the wrong target to mess with (a former DA or something like that).