Port security prevents this. As soon as the switch detects a physical disconnect it disables the port.

You could, with some electrical engineer-level tools and hardware, passively read the traffic to determine the MAC and then splice into the wire without disrupting the physical connection. But it would be very hard to do covertly or quickly.