Seems it is wise to stay far away from Verisign.
On a related note, we have been moving domains from Verisign for a while at Webhead since Verisign has failed to supply us with anything resembling an ISP tool. We did however consider using them for our own and clients payment systems, but reading horror stories like the one above has made me think twice about doing business with them.