Important Security Update About 'Heartbleed' Security Issue

April 2014

You may have heard in the news about the recently discovered “heartbleed” security issue (see that affects TLS (SSL) security used for secure communications to web sites on the Internet (the “closed padlock” you see when you login to secure sites).

An introduction is available on the BBC web site at,

Scramble to fix huge 'heartbleed' security bug

We have already patched all our servers with the latest software and are in the process of replacing all SSL certificates. Additionally, we had already implemented “Perfect Forward Secrecy” (PFS) for all our portal services which also means that all past communications should be protected from retrospective decryption.

We have have no evidence that any data (including user names and passwords) was exposed. However, if you have any concerns about your account's protection, you should change your password using the link provide in the portal.

As a general precaution when you are using any browser (at home or at work) you should enable checking for certificate revocation in your browser.

If you have any questions about this please feel free to contact us via

For more news please see our News section.