Heartbleed Flaw: Urgent Update

April 10, 2014

Hi Everyone,

We would like to bring to your attention an issue that affects the security of your personal data online. There was a serious software bug – now called Heartbleed – discovered in OpenSSL this week. OpenSSL helps secure your data when visiting websites that provide services such as e-mail, online banking, and online shopping. You probably notice when SSL is in use by the padlock icon that appears in your web browser when you are using a secure website.

This bug allows a potential attacker to pull information stored in memory on the servers that send your computer information while you are visiting websites utilizing OpenSSL. While the potential for your data or passwords to be compromised is not guaranteed, due to the widespread nature of the bug and the fact it is not easy for most people to know whether a site they are visiting utilizes OpenSSL, it is important that you change your passwords for all services that rely on SSL technology. In addition, the most updated list of patched high profile websites is below – along with the recommendation by the site owner on whether your password should be immediately changed:

http://www.cnet.com/how-to/which-sites-have-patched-the-heartbleed-bug/

It is also worth paying extra attention to your credit card statements to ensure no one is using your card to make fraudulent transactions.

Please refer to the websites below for more detail. If you have any questions, please contact us and we will do our best to answer your questions.

http://heartbleed.com/

http://bits.blogs.nytimes.com/2014/04/09/qa-on-heartbleed-a-flaw-missed-by-the-masses/

Thank you for your business!

JOE GADELL
President & Chief Technology Officer