Millions of passwords, credit card numbers and other personal information may be at risk as a result of a major breakdown in Internet security revealed earlier this week.

Read: CRA services back this weekend

The damage caused by the Heartbleed bug is currently unknown. The security hole exists on a vast number of Internet servers and went undetected for more than two years.

Read: Privacy rules to get tougher

There isn’t much people can do to protect themselves until the affected websites implement a fix. Mashable has released a list of sites where you should change your password. Those sites include Google, Yahoo, Dropbox and Facebook. Read the list here, which Mashable will continue to update as it gets new information.