Peloton’s had a rough go in the news cycle lately, and not helping matters is the fact that its leaky API allowed any hacker to obtain any user’s account data—even if that user had set their profile to private.
Source: Gizmodo – Peloton API Exposed User Data, Even for Private Accounts