Tea, a dating app billed as a safer space for women, is facing backlash after two security breaches exposed sensitive personal data from tens of thousands of users.
Tea, which recently climbed to the top of the App Store with over four million users, allows women to tag men’s dating profiles with “red flags” for behaviors ranging from ghosting and infidelity to sexual misconduct. Its rising popularity was fueled by a promise of safety, transparency, and digital accountability in online dating. But recent revelations suggest the platform failed to protect the very users it sought to empower.
Last week, tech news outlet 404 Media reported that users of the anonymous message board 4chan had gained access to a Tea database containing photos, chat logs, and government-issued identification used during verification. Screenshots from the breach showed users allegedly downloading and distributing the data, including selfies and private messages. At least 70,000 images are believed to have been compromised, according to security researchers.
Tea initially stated that the exposed data came from an outdated storage system and was more than two years old. However, follow-up reporting by 404 Media revealed that some leaked messages were dated as recently as the previous week. The conversations included deeply personal topics such as abortions, infidelity, and phone numbers. Many chats, though linked to usernames, contained enough information—such as social media handles—for identities to be traced.
In a second breach, an independent researcher discovered that a separate database allowed access to even more recent messages. The same vulnerability also permitted unauthorized users to send push notifications to the app’s full user base, raising fears of coordinated harassment or misinformation.
Despite claims of encrypted communication and short-term document retention, the repeated lapses have sparked broader concerns about the app’s infrastructure and transparency.
Tea’s core premise—allowing women to anonymously share experiences with men—has drawn criticism from some who argue it invites defamation. Now, that controversy has expanded to a far-reaching privacy crisis affecting users of all genders.
As security experts assess the fallout, the incident has revived a larger debate about safety, consent, and data protection in the rapidly growing online dating industry. Neither Tea nor its parent company has commented on whether affected users will be notified or compensated.
Leave a Reply