As you might know they advertise their service as 100% secure. Everybody knows that nothing is 100% secure but I'm wondering why they send their users' usernames and passwords to 3rd parties?
If you clicked on any of the sponsor links listed on their splash page in the last 2-3 weeks, your UnifiedStats username and password is displayed in the referrer logs of the sponsors. So, if you use the password you use for UnifiedStats for anything else and clicked any link on their splash page in the last two weeks, you might want to change your passwords in the other systems.