We've been spending the last two days auditing and responding to the OpenSSL vulnerability known as Heartbleed, which affects around 70% of the Internet. This widespread bug can cause disclosure of sensitive data, including private keys and passwords. As a precaution, we applied security updates as they became available, cleared all logged in sessions for accounts and users, rekeyed and reissued our SSL certificates, and recommended resetting passwords and API keys to prevent potential unauthorized access.