BankOfAmerica, perhaps my most important site from a security point of view does not seem to care: https://lastpass.com/heartbleed/?h=bankofamerica.com