Tea app hacked: private messages stolen

Messaging capabilities have been suspended on the women’s dating safety app, Tea, following a significant cybersecurity breach that has compromised thousands of images, posts, and comments. In a recent statement, the company disclosed, “As part of our ongoing investigation into the cybersecurity incident involving the Tea App, we have recently learned that some direct messages (DMs) were accessed as part of the initial incident.” The app, which caters exclusively to women and boasts a user base of 1.6 million, first reported the hack in late July. Users have been advised to anticipate further updates as more information becomes available.

“Our team remains fully engaged in strengthening the Tea App’s security, and we look forward to sharing more about those enhancements soon,” the company assured. In the interim, efforts are underway to identify any users whose personal information may have been compromised, with plans to offer free identity protection services to those affected.

A report from tech publication 404 Media indicated that some of the exposed messages contained sensitive discussions surrounding topics such as abortions and infidelity. Cybersecurity expert Rachael Percival emphasized the potential risks, stating, “Conversations could include names, details of past relationships, or other private material, opening the door to blackmail or emotional harm.” She advised Tea users to accept the free identity protection services as soon as they are made available, which may encompass credit monitoring, fraud alerts, and identity theft insurance.

Images hacked

Kevin Marriott, a senior manager at cybersecurity firm Immersive, expressed that the recent update from Tea is likely to alarm users who have shared personal details, including addresses and meet-up locations. “The fact that criminals potentially have both images and the associated account’s direct messages should raise the level of concern among users,” he noted. Users are encouraged to remain vigilant as they await further developments regarding the stolen information.

Tea provides women with tools to verify whether potential partners are married or registered sex offenders, as well as the ability to conduct reverse image searches to guard against “catfishing,” a practice where individuals use false online identities. One of the app’s most debated features allows users to share information about men they have dated, aimed at highlighting both “red flags”—potentially abusive behaviors—and “green flag” attributes.

Previously, the app disclosed that hackers had accessed 72,000 images submitted by its users, some of which included women holding photo identification for verification purposes. This is particularly concerning given that Tea’s privacy policy asserts these images are “deleted immediately” after authentication. The breach reportedly affects members who registered before February 2024. Despite the recent challenges, the app has seen a surge in popularity, though it has also faced criticism from some who perceive it as anti-men.

AppWizard
Tea app hacked: private messages stolen