In a shocking turn of events, the women-only dating safety app Tea has been hit by a significant data breach, exposing over 72,000 user images, including selfies and ID photos. The breach, first reported by TechCrunch on July 26, 2025, has raised serious concerns about privacy and security on platforms designed to protect vulnerable users.
Tea, a US-based app created as a safe space for women to discuss and vet potential dates, allows users to upload images of men, share experiences, and rate their behavior. However, hackers exploited a misconfigured Firebase storage bucket, gaining access to a trove of sensitive data, including private messages and personal images uploaded before 2024.
The leaked data, totaling more than 59 GB, was initially posted online, with some reports indicating that sensitive chats discussing personal topics like abortions and infidelity were also exposed. This second breach within days, as noted by various sources, has compounded the severity of the situation, leaving users vulnerable to identity theft and online harassment.
In response, Tea has temporarily disabled direct messaging features while it investigates the breach. The company has acknowledged the incident and is working to secure its systems, but the damage to user trust may already be irreparable for many.
Experts are urging users to be cautious about sharing personal information on any platform, even those marketed as safe spaces. The incident highlights the critical need for robust cybersecurity measures, especially for apps handling sensitive user data.
As the investigation unfolds, affected users are advised to monitor their accounts for unusual activity and consider changing passwords or deleting personal content from the app. The Tea breach serves as a stark reminder of the risks inherent in digital platforms, no matter their intended purpose.
Andrew Lee
