After the Heartbleed security vulnerability became known, SaaS Web reacted as quickly as possible and renewed all certificates. Unfortunately, the vulnerability is a malfunction that has existed for two years and was likely systematically exploited to spy on encrypted data connections. The effort required for this is significant, suggesting that larger organizations, such as espionage and intelligence services, were more likely to have exploited this gap.
Further information regarding the Heartbleed bug can be found here, among other sources: Heise article and FAZ article.
