I put my punting email address through a data checker thing once (sorry I'm not techie so can't exactly remember what it was!) and it threw up my password that i used only for aw was available on the darkweb, cross referenced to my punting email address. So it seems that aw data security is either shit or they actually sell on your details. Either way, I change the password on aw regularly and also make sure that it's nothing like any other passwords I use for real life stuff, as well as having a completely different punting email address (and phone number).