TP-Link forgets to register domain name, leaves config pages open to hijack
The domain name's new owners want $2.5 million to give it back.

http://arstechnica.com/security/2016/07/tp-link-forgets-to-register-domain-name-leaves-config-pages-open-to-hijack/