This question already has an answer here:
I recently looked at my local credit union bank and they said that their site is not vulnerable to heart bleed. However, I have used my credit card in many websites such as grubhub, amazon, some charity organizations, so the credit card data can be exploited. I want to have some expert opinion before I act?
PS: I looked at What should end-users do about Heartbleed? but couldn't find what I was looking for.