After a comprehensive review of ARL’s hosted and operated websites, ARL has determined that its sites were not impacted by the Heartbleed OpenSSL bug. No ARL-hosted system—including the StatsQUAL® sites, such as http://libqual.org/, http://climatequal.org/, or http://arlstatistics.org/—utilized OpenSSL. ARL sites and services operated on third-party platforms (e.g., Google Apps for Business) were quickly patched by those third-party vendors. While it is not necessary to change passwords that you may have on any ARL-related site at this time, you may wish to go ahead and do so, as it is a good practice to change passwords periodically.
For more information about the Heartbleed bug, see “The Heartbleed Hit List: The Passwords You Need to Change Right Now,” published on Mashable.com on April 10, 2014.