Peloton Bike
Peloton Interactive · E-Bike / Fitness Equipment
✓ Reviewed
Index
Collects age, gender, city, weight and workout statistics tied to an account, and a 2021 leaky API let researchers access private profile data that users had explicitly marked private.
Why this rating
Peloton collects age, gender, city, weight and workout data tied to an account, and a 2021 API vulnerability let researchers access other users' private profile data that had been explicitly marked private — a clear security failure.
What it is
- Microphone
- Camera
- Requires a cloud account
- Manufacturer
- Peloton Interactive
- Category
- E-Bike / Fitness Equipment
- Model years
- 2014-present
- Market status
- Current
- Companion app
- Peloton
The evidence 2
Independent research, regulatory action, lawsuits, breaches and journalism about this device — the "what actually happens" axis. Each links to its source.
-
Security researchers found a Peloton API leak in 2021 that let anyone access other users' age, gender, city, weight and workout data, even when marked private.
Why it matters here: Direct report on the 2021 Peloton API leak exposing private user profile data.
-
TechCrunch's coverage confirming the Peloton API vulnerability exposed private user profile data to unauthorized requesters.
Why it matters here: TechCrunch confirmation of the Peloton API vulnerability.
Descriptive, cited, not legal advice; ratings are versioned and corrections create a new version. Data from the IoT Info Grabber DB research project, CC BY-SA 4.0.