It would appear South West does not take web security seriously. Just like one of my bank accounts that would not let me use anything other than numbers or letters in a password until recently. Seems as if WN may have been negligent in the left of your miles. If WN took security seriously, they would have multiple steps to redeem miles that involves at least a combination of email, www, phone and so forth....