Tea app takes messaging system offline after second security issue reported

Tea, the dating discussion app that has recently captured attention for its unique approach to facilitating conversations among women about their dating experiences, has faced a significant challenge following a cybersecurity breach. Late Monday, the company disclosed that some direct messages (DMs) had been compromised in the incident, raising concerns about user privacy.

Details of the Breach

Initially, the app, which soared to the top of the U.S. Apple App Store last week, confirmed on Friday that thousands of selfies and photo IDs of registered users were exposed. Reports from 404 Media highlighted that an independent security researcher discovered the vulnerability, which allowed unauthorized access to sensitive messages. These discussions included topics such as abortions, infidelity, and personal contact information.

In a statement shared across its social media platforms, Tea acknowledged the breach, stating, “We recently learned that some direct messages (DMs) were accessed as part of the initial incident.” The company took immediate action by taking the affected system offline, emphasizing their commitment to user safety. “At this time, we have found no evidence of access to other parts of our environment,” they assured users.

Scope of the Exposure

The extent of the exposure remains uncertain, as it is currently unclear how many messages were left vulnerable. However, the company has reported that approximately 72,000 images were leaked during the initial breach. This figure includes around 13,000 selfies or images featuring photo identification submitted by users for account verification. Additionally, about 59,000 images from posts, comments, and direct messages were accessed without authorization, as confirmed by a spokesperson last week.

Fortunately, Tea has clarified that no email addresses or phone numbers were compromised in the breach. The incident specifically affects users who registered before February 2024, leaving newer users unaffected by this security lapse.

AppWizard
Tea app takes messaging system offline after second security issue reported