The worst part of it is that attacks that exploit Heartbleed are essentially undetectable, meaning there's no way to tell if a website has been compromised.
It's little surprise that a litany of sites moved as fast as they could to update their versions of OpenSSL to one patched with a fix.