Peloton API Exposed User Data, Even for Private Accounts

Peloton's had a rough go in the news cycle lately, and not helping matters is the fact that its leaky API allowed any hacker to obtain any user's account data-even if that user had set their profile to private.