Joe Biden's Peloton bike may pose cybersecurity risk, experts warn

Joe Biden’s fitness regime may potentially cause an unexpected headache for security services charged with keeping the new president safe in the White House, with his Peloton exercise bike viewed by some as a potential cybersecurity risk.

At home in Wilmington, Delaware, Biden is reported to start each day with a workout in a gym equipped with weights, treadmill, and the Peloton bike. Peloton combines a stationary exercise bike with an interactive tablet that allows the rider to take part in group training sessions remotely. Already gaining traction before the coronavirus pandemic, stay-at-home orders and social distancing have led to a surge in the product’s popularity among those unable to get to their regular gym.

Related: Virtual reality: how cyclists are pedalling through the pandemic

However, as well as watching an instructor, participants in the classes are also on view – meaning thetablet comes equipped with a webcam and a microphone, which will be in a sensitive area of the White House.

Popular Mechanics magazine spoke to cybersecurity expert Max Kilger at the University of Texas about the risk. He said: “Because you’re connected to the internet, even though there are firewalls and intrusion detection software ... those things can be gotten around if you’re really good and skilled. If you really want that Peloton to be secure, you yank out the camera, you yank out the microphone, and you yank out the networking equipment ... and you basically have a boring bike. You lose the shiny object and the attractiveness.”

It is not the first time the issue has been raised. A 2017 review revealed that former first lady Michelle Obama had been supplied with a specially modified Peloton that came without a camera or microphone.

Prior to the pandemic, in late 2019 Peloton’s value plunged by $1.5bn after a “dystopian, sexist” advert in which a man surprises his already super-slim partner with the equipment in a bid to get her to lose weight.

The problem for Biden is not insoluble, and White House security experts have to adapt to changing technology all the time, although the issue may be particularly sensitive at the moment given the recent cyber-attack on federal agencies. At least six government departments were breached in a likely Russian intelligence operation thought to have begun in March.

Garrett Graff, the director of the cybersecurity initiative at the Aspen Institute, told the New York Times: “The threat is real, but it is presumably a manageable risk given enough thought and preparation.”

It does, though, raise the prospect that in the coming months other US Peloton users may suddenly and unexpectedly find themselves in a riding class with their commander-in-chief.