It happens all the time. A few days back, I came across a thread here in Bitcointalk. It was about a guy who got BTC10,000 stolen from his Blockchain.info wallet, as he didn't enabled 2FA. The thread was from 2013, and back then BTC was worth only around $10 per coin. But imagine what he could have done, if he had all those coins now.