2021-05-05 UTC
# 
@zackwhittaker New: Peloton's leaky API let anyone pull members' private user account data, even with their profiles set to private. Worse, when the bug was privately reported earlier this year, Peloton ignored researchers past their 90-day deadline. https://techcrunch.com/2021/05/05/peloton-bug-account-data-leak/ (twitter.com/_/status/1389898720125280259)