Overview
- Hackers accessed an archived database holding images submitted before Feb. 24, 2024, compromising roughly 13,000 ID verification selfies and 59,000 publicly viewable photos.
- The breach was driven by a coordinated “hack and leak” campaign on 4Chan that urged users to steal and share the data, with stolen images surfacing on both 4Chan and X.
- Tea has paused its legacy storage system and implemented new security protocols to prevent further unauthorized access.
- The company is working with third-party cybersecurity experts to investigate the full scope of the breach and secure its infrastructure.
- Tea is monitoring online forums for circulating stolen images and affirms that user contact details were not compromised and that accounts created after February 2024 were unaffected.