Fava Tea is Safe from Heartbleed

You may have heard about the "Heartbleed" security flaw that has exposed some websites to attackers. Fava Tea Company takes threats like this very seriously, and we're confident that our website is not, and have not been, subject to this vulnerability.

What is Heartbleed?

Heartbleed was discovered in OpenSSL, the data encryption standard used by a majority of websites around the world to transmit information securely. It lets attackers steal confidential data without being noticed, including passwords, bank account information, stored files, and Social Security numbers. Since the bug was discovered, many websites have taken steps to address the flaw.

How is Fava Tea Company responding?

Fava Tea Company has always taken aggressive measures to guard our internal data systems and our guests' personal information. After a thorough review of our security systems and procedures, we can assure guests that their accounts and confidential information are fully protected against the Heartbleed vulnerability.

We will continue to monitor the situation with our web and IT partners, and will take all necessary steps to safeguard our guests' data.

What should I do?

The most important thing you can do to protect yourself online is to have strong, unique user names and passwords for all the websites you use. 

Although it's not necessary for our guests to change the passwords they use to log on to favatea.com, our view is that it's always a good practice to change your password periodically, and to use different passwords for every site you visit—especially online shopping sites.