Tea is an app that claims to help women “make sure your date safe, not catfish, not a relationship” that is suffering from security breaches. 404 Media The report says that the database published on 4chan allows anyone to access the user’s data. (Remove since.) The dataset contains thousands of images, including a driver’s license.
4chan users claim that the data comes from a bare database hosted on Google’s application development platform Firebase. 404 Media Verified that the exposed bucket URL matches one found in Tea’s Android app.
The company confirmed the violation. In a statement 404 Media“Unauthorized access to our system was identified and a comprehensive investigation was conducted immediately to assess scope and impact,” Tea said. The company said the information exposed included data from two years ago. It includes 72,000 images including selfies, photo IDs and pictures of app posts and DMS.
“This data was initially stored in accordance with law enforcement requirements related to cyberbullying,” said Tea. “We have participated in third-party cybersecurity experts and are working around the clock to ensure our systems are protected. Currently, there is no evidence that current or other user data is affected. Protecting the privacy and data of our users is our highest priority. We are taking all necessary steps to ensure the security of our platform and prevent further exposure.”
The app allows users to post photos of “red card” men. “Already swiped a date on Tinder, Bumble, Match or Hinge?” The app’s Play Store Tone reads. “Tea is an essential app that helps women avoid dating advice before their first date and show them who is really behind the figure of the person they are dating.”
Its Play Store lists a reverse phone number lookup. It has parts of the man’s real name, age, address, social profile and relationship status. Other features include reverse image search and background checks to help women “drink tea on dates.” Users can investigate others to see if they should date a new match.
The app requires new users to submit photos that verify selfies and government-issued IDs. Tea tells 404 Media It uses it to verify that the new registration is indeed female.
The timing of the violation coincides with the popularity of the app. according to Business InsiderTea peaked at the top of the Apple App Store this week. The app was first launched in 2023.
