This doesn’t surprise me.

The US National Security Security Agency reportedly used the recently uncovered “Heartbleed” security exploit to access information, Bloomberg