Home page suddenly visible when it used to be protected

Hi, I've got a site that I was about to clone and noticed the home page of blog posts and posts were suddenly visible but I didn't change anything over night. The only thing that changed was the recent membership update. I can't give you the URL publicly, but I did give you all admin access. I can give you more details privately, but very much need to figure out why and how to fix it soon as we're presenting it tomorrow. Can you help?