---
title: The Worst Security Hole the Internet Has Ever Seen
description: "<p>Websites are racing to patch the <strong>Heartbleed bug</strong>, <span style=\"color: #000000;\">the worst security hole the Internet has ever seen.  As sites fix the bug on their end, it's time for"
---

[Blog ](https://www.connections.com/blog)

# [The Worst Security Hole the Internet Has Ever Seen](https://www.connections.com/blog/the-worst-security-hole-the-internet-has-ever-seen)

 Written by [jackstin](https://www.connections.com/blog/author/jackstin) | Apr 11, 2014 1:36:30 PM

Websites are racing to patch the **Heartbleed bug**, the worst security hole the Internet has ever seen.  As sites fix the bug on their end, it's time for you to change your passwords. The Heartbleed bug allowed information leaks from a key safety feature that is supposed to keep your online communication private -- email, banking, shopping, and passwords.

 

Don't change *all*your passwords yet, though. If a company hasn't yet updated its site, you still can't connect safely. A new password would be compromised too.  Many companies are not informing their customers of the danger -- or asking them to update their log-in credentials. So, here's a handy password list. It'll be updated as companies respond to CNN's questions.

**Change these passwords now** (they were patched)

- Airbnb
- Google, YouTube and Gmail
- Facebook
- Yahoo, Yahoo Mail, Tumblr, Flickr
- OKCupid
- Pinterest
- Wikipedia

**Don't worry about these** (they don't use the affected software, or ran a different version)

- Amazon
- Apple, iCloud and iTunes
- AOL and Mapquest
- Bank of America
- BECU
- Capital One bank
- Charles Schwab
- Chase bank
- Citibank
- E*Trade
- Fidelity
- Healthcare.gov (Health Department said "security protections prevent this vulnerability from occurring.")
- HSBC bank
- Hulu
- LinkedIn
- Microsoft, Hotmail and Outlook
- PayPal
- PNC bank
- Scottrade
- TD Ameritrade
- Twitter
- U.S. Bank
- Vanguard
- Wells Fargo

**Don't change these passwords yet** (still unclear, no response)

- American Express

[httpv://www.youtube.com/watch?v=wpB7zNG6H68&feature=youtu.be](http://money.cnn.com/2014/04/10/technology/security/heartbleed-passwords/index.html?hpt=hp_t3#TOP)

 

 

[View full post](https://www.connections.com/blog/the-worst-security-hole-the-internet-has-ever-seen)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "jackstin"
  },
  "dateModified" : "2018-01-10T19:41:38.652Z",
  "datePublished" : "2014-04-11T13:36:30Z",
  "headline" : "The Worst Security Hole the Internet Has Ever Seen",
  "image" : {
    "@type" : "ImageObject",
    "height" : 7,
    "url" : "https://cdn2.hubspot.net/hubfs/3787550/Imported_Blog_Media/bug-1.gif",
    "width" : 7
  },
  "mainEntityOfPage" : "https://www.connections.com/blog/the-worst-security-hole-the-internet-has-ever-seen",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60,
      "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
      "width" : 60
    },
    "name" : "Blog"
  }
}
```