Tea dating app hacked by 4chan user, over 72,000 users' verification selfies leaked
The woman-only dating app 'Tea' was hacked, leaking 72,000 selfies uploaded for verification. The company confirmed unauthorized access led to the breach.
The woman-only dating app, called 'Tea' was hacked, resulting in the leak of 72,000 selfies that users uploaded during verification, the company said.
'Tea' acknowledged the leak on in a statement after a user on the platform 4chan posted about it. In its statement, Tea, founded by Sean Cook, said that the "identified authorized access to one of our systems" that resulted in the leak.
Tea said that it has conducted a probe into the hack after allegations surfaced on social media, and the preliminary probe found that its "legacy data" systems have been breached.
The statement added that the leaked images were in two groups: 13,000 images were users' selfies uploaded during their profile verification, and 59,000 images were from users' accounts that other users of the app could view. Some of the verification selfies were government ID cards, such as driver's license, which are now publicly viewable.
Here's a screenshot of the 4chan users' posts about the breach:
Company Faces Backlash
Amid claims that the breach was caused by the poor firebase configuration of the app, Tea has said that it has launched an investigation and plans to publish the findings soon.
The Tea app is a women's dating safety app that claims to have been designed to allow women to share information and photos about men they encounter for safety and verification purposes.
Also read: Microsoft Server Software comes under cyberattack from unidentified hacker
The app states in its privacy policy: "Tea Dating Advice takes reasonable security measures to protect your Personal Information to prevent loss, misuse, unauthorized access, disclosure, alteration and destruction. Please be aware, however, that despite our efforts, no security measures are impenetrable."
Now, the company is facing severe backlash over the data breach.
