US-based women-only app 'Tea' hacked, 72,000 pictures leaked

Tea, a women-focused dating and safety app that recently topped the US iOS App Store charts, has suffered a significant data breach exposing tens of thousands of user images.

The company confirmed that it had discovered “unauthorised access to one of our systems,” which led to the exposure of around 72,000 user images.

Initial findings from Tea have indicated that the breach affected two sets of images: approximately 13,000 photos submitted for identity verification, including selfies and government-issued IDs.

It also includes about 59,000 images that had been publicly visible in the app, such as those shared in posts, comments, or direct messages (DMs).

The compromised data was reportedly stored in a legacy system containing information from over two years ago.

The company stated that, so far, there is no indication that more recent user data or additional information was compromised.

However, earlier, reports surfaced on platforms like Reddit and 404 Media claiming that the leaked selfies and ID photos had appeared on 4chan, an anonymous online message board known for hosting controversial content.

Notably, Tea's user verification process requires individuals to upload personal photos and IDs to ensure authenticity and safety on the platform.

The app was designed to let women report negative dating experiences, aiming to protect other users from unsafe encounters.