We value your privacy
We use cookies to enhance your browsing experience, serve personalized ads or content, and analyze our traffic. By clicking "Accept All", you consent to our use of cookies.
We use cookies to help you navigate efficiently and perform certain functions. You will find detailed information about all cookies under each consent category below.
The cookies that are categorized as "Necessary" are stored on your browser as they are essential for enabling the basic functionalities of the site. ...
Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.
No cookies to display.
Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.
No cookies to display.
Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.
No cookies to display.
Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.
No cookies to display.
Advertisement cookies are used to provide visitors with customized advertisements based on the pages you visited previously and to analyze the effectiveness of the ad campaigns.
No cookies to display.
Tea app takes messaging system offline after second security issue reported
Tea, the dating discussion app that has recently captured attention for its unique approach to facilitating conversations among women about their dating experiences, has faced a significant challenge following a cybersecurity breach. Late Monday, the company disclosed that some direct messages (DMs) had been compromised in the incident, raising concerns about user privacy.
Details of the Breach
Initially, the app, which soared to the top of the U.S. Apple App Store last week, confirmed on Friday that thousands of selfies and photo IDs of registered users were exposed. Reports from 404 Media highlighted that an independent security researcher discovered the vulnerability, which allowed unauthorized access to sensitive messages. These discussions included topics such as abortions, infidelity, and personal contact information.
In a statement shared across its social media platforms, Tea acknowledged the breach, stating, “We recently learned that some direct messages (DMs) were accessed as part of the initial incident.” The company took immediate action by taking the affected system offline, emphasizing their commitment to user safety. “At this time, we have found no evidence of access to other parts of our environment,” they assured users.
Scope of the Exposure
The extent of the exposure remains uncertain, as it is currently unclear how many messages were left vulnerable. However, the company has reported that approximately 72,000 images were leaked during the initial breach. This figure includes around 13,000 selfies or images featuring photo identification submitted by users for account verification. Additionally, about 59,000 images from posts, comments, and direct messages were accessed without authorization, as confirmed by a spokesperson last week.
Fortunately, Tea has clarified that no email addresses or phone numbers were compromised in the breach. The incident specifically affects users who registered before February 2024, leaving newer users unaffected by this security lapse.