I believe that pg said in the original announcement that they had already (easily) detected which applications had this bug (that's also how they know how many were affected).

I don't have a link offhand, but I believe that all founders were notified.