This question already has an answer here:

I recently looked at my local credit union bank and they said that their site is not vulnerable to heart bleed. However, I have used my credit card in many websites such as grubhub, amazon, some charity organizations, so the credit card data can be exploited. I want to have some expert opinion before I act?

PS: I looked at What should end-users do about Heartbleed? but couldn't find what I was looking for.

marked as duplicate by AviD Apr 11 '14 at 7:46

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • 1
    I would say it depends. Most credit card companies won't hold you responsible for something like this. Your credit card would have only been compromise when you submitted the form, in most cases, what actually is stored is just an authorization token. Granted ALL traffic from the compromised certificate could be decrypted, the amount of data your talking about, would be enormous. – Ramhound Apr 11 '14 at 4:48
  • So, essentially this would be an overkill. Moreover, VISA insurance should cover fraudulent charges. – Tushar Apr 11 '14 at 5:03
  • 1
    If none of the answers there mention this, then apparently you don't. There is no list of "what should end-users not bother doing". – AviD Apr 11 '14 at 7:47