According to a recent report by security firm McAfee, hackers can now remotely access the camera and microphone of the Peloton bicycle and track its users.

While McAfee initially notified Peloton of the security issue in March, the latest report also stated that attackers can also add apps disguised as Netflix and Spotify to unknowingly encourage users to store their login credentials for later malicious purposes.

According to reports, the latest vulnerability primarily affects public bicycles, but an attacker could interfere with the equipment at any point in the supply chain, from design to delivery.

For more information, read the original story in NPR.