heartbleed

Any of the IT experts here able to give a sensible view on this? I've only seen the DM report which I, perhaps harshly, suspect may be ever so slightly sensationalist. So, is this a clear and present danger whereby "they" have access to all passwords from, inter alia, Lloyds and Nationwide, or...