"We found that the database provided a real-time stream of user logins, user posts, comments and other interactions, allowing anyone to read private comments and posts. The database also revealed the unencrypted private messages between members but not their associated email addresses. (Given the highly sensitivity of the data and the privacy of the affected users, we’re not posting data, screenshots or specifics of user content."
https://techcrunch.com/2018/12/20/blind-anonymous-app-data-exposure/
https://techcrunch.com/2018/12/20/blind-anonymous-app-data-exposure/