Security experts are warning small businesses that the Heartbleed computer bug is a risk to their HR and payroll software.

Using OpenSSL code which is found in some software as a service (SaaS) or online web platforms, the now-infamous computer virus could enable hackers to compromise systems undetected and collect sensitive personal and financial data.

With HR systems holding personal information such as bank details, passport numbers and payroll information, companies need to ensure this data is secure, said Paul Beaumont, managing director of Octopus HR.

He added: “It is vital to know that your software provider takes its responsibility to security seriously and invests accordingly. The Heartbleed bug is hitting the headlines now but has actually been around for the last two years.

“Organisations that use a SaaS HR system are strongly advised to check with their provider whether their HR system is hosted on servers having used any of the affected versions of OpenSSL. If it does, they have been, and still are, vulnerable to hackers.”

Small businesses can check to see whether their provider uses OpenSSL by pasting the provider’s URL used to login to the system (beginning with https://) into a free online tool – click the link below for details.