yes. usually no one know your password are all same but if you registered on some fake site and you submitted your payment processors id there. then he can use that same password to enter your processor account and steal your money.