I've been following this massive data hole created by cloud flare for the past week. You can read more about it all over the internet. Just because there is a hole doesn't mean there was a leak.
google CloudFlare leak or cloudbleed.
Several of my RL websites where at risk and I change passwords on all of those sites. I also don't use the same password on two sites.
I finally got around to checking my other sites.
Github has an unoffical list, but the number of sites are so large it's easier to use a search tool.
https://github.com/pirate/sites-using-cloudflare/blob/master/README.md
https://cloudbleedcheck.com/
Cloudbleed check.com had hits on some of the hobby sites I visit. <- All this means is that they subscribed to the service from cloudflare that had the leak, not that anything was leaked.
TNABoard
XOcompanions
nightshift.co
chatzy.com