Tea is an anonymous dating application exclusively open to women for registration and posting. Its primary function allows female users to share commentary about men they have dated—at least ostensibly presented as anonymous on the surface.
On July 26, 2025, a user on the 4Chan forum published a portion of the app’s database. The leak revealed that hackers had somehow gained access to 72,000 images, including 13,000 selfies and identification documents submitted for verification purposes.
Because Tea restricts access solely to women, the registration process requires users to upload both a selfie and a government-issued ID for authentication. Only after passing this verification can users anonymously create posts or comment on existing ones.
The leaked data primarily consists of images; the database does not appear to contain email addresses or phone numbers. However, it affects users who registered prior to February 2024. While the absence of additional personal data may seem to limit the fallout, the exposure of selfies and ID photos alone could have serious consequences.
Notably, despite the severity of the breach, the incident unexpectedly boosted the app’s visibility. Following the leak, Tea surged to the top of the free apps chart on the Apple App Store—likely attracting an influx of new female users.
Tea has since disclosed that it has engaged external cybersecurity experts to investigate the breach and has implemented additional safeguards to address unauthorized access. However, the company has not provided details regarding the specific vulnerability or method of attack.
Related Posts:
- 4chan Suffers Major Cyberattack, Sensitive Data Leaked
- 4Chan Resumes Operation After Hack, Cites Funding Issues
Support Our Threat Intelligence
If you find our CVE report and cybersecurity news helpful, consider supporting our work.