Heartbleed sends a request to the server for information, and it returns not only the requested data but also previously stored data that was supposed to be protected. This allows hackers to extract confidential information.
‍