API tokens and Emails leaked lead to sensitive information Disclosure