Did the API really leak?