In JetBrains Hub prior to 2020.1.12669, information disclosure via the public API was possible.
jetbrains hub