Overview

• Unauthorized access to a legacy archive stored about 72,000 images, including 13,000 ID verification photos and 59,000 user-shared images from posts and messages.
• The compromise affected only pre-February 2024 sign-ups and did not expose email addresses or phone numbers, according to Tea’s statement.
• Tea has partnered with third-party cybersecurity experts and paused use of its outdated storage system to fortify its security infrastructure.
• After registering more than four million women during a viral July launch, the app now contends with intensified scrutiny over its data practices and legal liability.
• While Tea maintains it donates 10 percent of profits to the National Domestic Violence Hotline, privacy advocates warn its anonymous review features risk facilitating defamation and doxxing.