Ancestry's Facebook page moderators have addressed this issue a number of times in the last few days. Here is the latest:

From Anne: "Had Ancestry dealt with the Heartbleed problem? Do they use “OpenSSL" software, and if so, have they patched systems and updated certifications?"

From Ancestry: "Hi Anne, we take our members’ privacy very seriously, and are continuously scanning our site to ensure that member information is secure. We have evaluated our site and confirmed that we are not at risk for the vulnerabilities presented by the Heartbleed security bug that is affecting other web sites."