Overview

• Security researcher Kasra Rahjerdi reported that over 1.1 million private messages, including discussions of abortion, cheating and rape, were exposed in a second breach.
• Tea has suspended its direct messaging feature out of an abundance of caution while it investigates the incident.
• The company has hired third-party cybersecurity firms to shore up its systems and is offering free identity protection services for affected users.
• Two class-action lawsuits filed in the Northern District of California accuse Tea of negligence and breach of implied contract, with one complaint also targeting X and 4chan for proliferating the stolen data.
• The FBI has launched a formal investigation into the successive breaches and is evaluating the platform’s data retention and security protocols.