They probably registered the name very early in their corporate life. At some point, they had a real business, and a business critical domain name, but they didn't realize they needed to do something different. My CEO registered our business names at network solutions, sigh.

Anyway, as a wakeup call -- if you have a business critical domain name, you need to find (and use) a registrar that has a registry lock procedure for the TLD you're in. A registry lock means the registry won't process changes from your registrar unless you authorize them, which makes it a lot harder to change things on purpose, or by an attacker. I imagine abuse takedowns could still go through though -- but there will at least be more people who know you care about your domain.