That's true but it also takes time plus there really isn't an excuse for not having security emails. Another thing you have to consider is that Banks also store your details and most have scans of your passport so security vulnerabilities could lead to identity fraud which is a serious problem.

Probably the best analogy for my experience, I'v heard so far.

I love this coin, it has a lot of potential and I think the price rise has only just begun. The correction was expected and happens every time, the rocket goes off.

This morning as you might be aware the OpenSSL bug called Heartbeat was announced. Here is my and others experience with HSBC, Barclays and Nationwide.

HSBC

I called HSBC, this my personal bank. They seemed to pretend like they knew what I was talking about. I asked to be transferred to some security report line or be given an email. HSBC informed me that everything is fine and as far as they were aware, I had nothing to worry about. I knew that they probably weren't lying considering how long I was on the line. Plus their site and mobile apps don't seem to be running on OpenSSl so I trusted them (Yes, I trusted a Bank.)

Barclays

My parents are on Barclays and use their internet service but I was also more personally invested in this. As many of you, I use the application called pingit. According to this page, http://www.barclays.co.uk/Mobile/BarclaysPingitSoftwaretermsandconditions/P1242607867693 the app uses OpenSSl. Due this being a mobile application it's hard to find out if Heartbleed is being used.

I decided to call them so I can report the possible vulnerability. My experience can be summed up in three points.  

• 1) They have no security report line or email
• 2) Customer service didn't seem to care
• 3) Even calling head office and reporting the issue they were unable to transfer me to a security team or didn't seem to be worried

After 40mins and 5GBP spent on calls later, I was told the internet fraud email. This a internet fraud prevention email not a security report bug email.  Either way, I wrote to them:


This turned out no results and I still haven't received an email back. I assumed that this was useless and tried to reach them on twitter. That also turned out no reply.

Nationwide

This not my personal experience and I only know small details of the experience. I was in talks with someone on twitter about this problem, their bank is Nationwide. They were unable to got any results.


Conclusion

I find it amusing how every single Bitcoin exchange has dedicated security emails and even phone lines but massive Banks such as HSBC and Barclays don't. It might be amusing for now but in the long term this a serious problem that has to be addressed.