Overview

• Tea disabled its direct messaging feature after confirming unauthorized access to more than 1.1 million private conversations
• The breach also exposed at least 72,000 legacy user images, including 13,000 selfies and photo IDs uploaded before February 2024
• Company officials report that no email addresses or phone numbers were compromised and no other systems show signs of unauthorized access
• Tea has retained external cybersecurity firms and notified law enforcement to contain the incident and identify security gaps
• Affected legacy users will receive notifications and free identity protection services as the company bolsters its data safeguards