CoudFlare Security Issue – It was just announced that for the past 5 months, in certain cases sensitive data being sent from a Cloudflare customer website to a site visitor has been mixed with data being sent to visitors of completely different websites.
This issue was reported to Cloudflare last Saturday by a Google researcher. They have been working frantically since then to fix it.
This data leak was announced several hours ago on the Google Project Zero mailing list and on the Cloudflare blog. Some of the leaked data has been indexed by search engines who have been working to scrub the data from their caches.
To help explain the issue and help you secure your website, we have published details of what occurred and how to secure your website in case you have been affected by this data leak.