Overview
- Security researcher findings show hackers accessed over 1.1 million direct messages dating back to early 2023 by exploiting a Firebase development platform vulnerability.
- Earlier in July attackers also leaked about 72,000 user images from the app’s legacy storage, including 13,000 selfies and photo identification documents.
- Tea has taken its messaging feature offline, notified affected users and pledged to offer free identity protection services.
- The company has engaged third-party cybersecurity firms and reported the incident to the FBI, which has opened an investigation.
- Two class-action lawsuits filed in the Northern District of California allege negligence, breach of implied contract and failure to delete verification data as promised.