Tea suffers massive data breach as 4chan user discovers all collected personal data was public

by

The “Tea” app, designed specifically for female users, demands verification of one’s gender identity through the submission of identification. Unfortunately, it’s been uncovered by some 4chan users that all women’s private information inputted during sign-up was inadvertently made accessible on a public server.

This incident, although classified as a “data breach”, simply involved information that was already accessible to the public being brought to light by individuals who took the time to seek it out.

Each identifier utilized for registration was kept in a publicly accessible storage bin, without the need for any password protection.

Consequently, the privacy of all users on the app appears to have been breached, as hackers were able to gather and store all their data prior to the security loophole being fixed by using data-gathering scripts.

Tea app uploaded users’ personal data to a public server

This app, named Tea Dating Advice, is designed exclusively for women, providing a secure space where they can seek guidance as they navigate the dating scene on platforms such as Hinge, Bumble, and Tinder. It offers the unique advantage of receiving support and advice from fellow women who are in various stages of relationships.

The design aims to ensure safety in the online dating world for women by offering background checks, discussions with others about their interactions with the matched individual, and general dating advice.

Actually, I was quite surprised when I found out that in order to use this gaming app, I’ve been asked to provide concrete evidence proving my gender as female instead of gaining access to the game itself, which is called Tea.

Users are typically expected to submit an identifying document that reveals their gender, such as a driver’s license or official ID card. Over 60 gigabytes of selfies and personal identification details have already been shared online.

Instead of storing this sensitive data securely, Tea’s data was made available on a publicly accessible server, which has since been found by 4chan users. They publicly shared links to both the public storage location and a pastebin where all user data was compiled in one place, encouraging people to search for themselves to see if they were included.

Tea has yet to comment on the data breach.

Read More

2025-07-25 21:19