TRELLO API ABUSED TO LINK EMAIL ADDRESSES TO 15 MILLION ACCOUNTS

Summary from the TLDR InfoSec newsletter

An exposed API in the project management tool Trello allows the linking of private email addresses with Trello accounts, resulting in the creation of millions of data profiles containing public and private information.