Peloton’s leaky API let anyone grab riders’ private account data

Halfway through my Monday afternoon workout last week, I got a message from a security researcher with a screenshot of my Peloton account data.