https://www.theverge.com/2018/12/10/18134541/google-plus-privacy-api-data-leak-developers
the new vulnerability impacted 52.5 million users, who could have had profile information like their name, email address, occupation, and age exposed […] even if their account was set to private.