Overview

• The app has paused its direct messaging feature after discovering unauthorized access to both its image repository and private chat database.
• The first breach compromised about 72,000 user-submitted images, including verification selfies and ID photos that were supposed to have been deleted.
• Security researcher Kasra Rahjerdi and 404 Media confirmed a separate leak of over 1.1 million private messages dating from the app’s launch through last week.
• Tea has engaged outside cybersecurity firms to investigate and shore up its systems and is offering affected users free identity protection services.
• Two class-action suits filed in Northern California allege negligence and breach of contract, and the FBI has opened an inquiry into the circumstances of the leaks.