An unauthenticated user could view sensitive information due to a Peloton bug.