Tea, the anonymous dating advice app for women that has the internet buzzing, is in hot water after a data breach.
Thousands of images of women, including selfies and photos of IDs that were used to verify their identity to join the app, were exposed because of the breach.
"We can confirm that at 6:44 AM PST on Friday, July 25th, Tea identified unauthorized access to one of our systems and immediately launched a full investigation to assess the scope and impact," a spokesperson for Tea told Business Insider in a statement.
"Preliminary findings indicate that the incident involved a legacy data storage system containing information from over two years ago," the spokesperson said.
The Tea app allows women to post a "man" (including his name, estimated age, location, and photos) with the option to add commentary. Users can also react to posts with green or red flags. Some users post photos of men asking for "tea" — gossip — about them. Others share posts seeking advice. The app does not allow screenshots.
The breach included about 72,000 images — about 13,000 of which were either selfies or photo identification "submitted during account verification," the company said. Another 59,000 images from within the app, as well as comments and direct messages, "were accessed without authorization."
404 Media, which found that the data had been posted to 4chan, first reported the breach on Friday morning,
Tea said it is working with "third-party cybersecurity experts" after the breach and does not believe "current or additional user data was affected."
Meanwhile, in the Tea app, an administrative account "TaraTeaAdmin" informed users about the breach in a post, which now has hundreds of comments on it.
The Tea app has seen an influx of new users and hit No. 1 on the US Apple App Store this week. On Friday, the company posted an Instagram story stating that more than 2 million new users have requested to join the app.
Privacy concerns had already been a topic of discussion amid Tea's virality — but mostly concerning the privacy of the men posted to the app. Now, those concerns are going both ways.
Have a tip? Contact this reporter via email at sbradley@bjinnox.com or Signal at @sydneykbradley.123. Use a personal email address, a nonwork WiFi network, and a nonwork device; here's our guide to sharing information securely.
