BitPay just sent out an email saying, "We do not and did not use the main Cloudflare feature which had the security flaw, and we believe that no BitPay or Bitpay user data was compromised."
Saw #CloudBleed trending on twitter this morning, looks like you were way ahead of it. Thanks for the post!
We don't use Cloudflare for anything to do with Blesta, though plenty do in the industry. Pretty huge deal.