Here is a list of websites and email providers affected by this new Heartbleed Bug (a username and password exploit).  If you use hotmail or outlook (Microsoft) you should be ok.  Google claims that Gmail users are unaffected but they patched it after it was discovered so you should probably change it.  Prudent to change it every so often anyways.  Banks are fine apparently.