Social group privacy
 

There is a social group which requires membership in order to be able to read and that is set to invite-only. However two non-members just posted in it and and said they have been reading for months. I am running 3.8.0. Was there a bug which was fixed?