{"id":149048,"date":"2025-11-23T03:26:23","date_gmt":"2025-11-23T03:26:23","guid":{"rendered":"https:\/\/www.newsbeep.com\/nz\/149048\/"},"modified":"2025-11-23T03:26:23","modified_gmt":"2025-11-23T03:26:23","slug":"new-tea-app-hack-exposes-womens-personal-messages-phone-numbers","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/nz\/149048\/","title":{"rendered":"New Tea app hack exposes women’s personal messages, phone numbers"},"content":{"rendered":"

Just days after thousands of user images and locations were leaked in an apparent hack of archived app data<\/a>, women-only safety app Tea is weathering data exposure at an even larger scale than first reported. <\/p>\n

In addition to exposing thousands of user verification images and personal IDs, which were later abused by users on platforms like 4Chan, the app’s recently discovered security flaws make it possible for hackers to access private messages between users. An independent security researcher, verified<\/a> by 404Media, was able to pull conversations from a second database that were sent as recently as last week, which included sensitive information like shared phone numbers, conversations about intimate relationships, and discussions of abortion. <\/p>\n

SEE ALSO:
\n
\n Grindr bans ‘no zionists’ in bios, but still allows racist and fatphobic language<\/p>\n

<\/a><\/p>\n

The researcher, Kasra Rahjerdi, also obtained access to back-end app features like the ability to send mass push notifications to users’ devices. They told 404Media that the second vulnerability existed until late last week, around the time the initial hack was reported. <\/p>\n

\n Mashable Light Speed\n <\/p>\n

Recommended deals for you<\/p>\n

\n
\n Apple AirPods Pro 3 Noise Cancelling Heart Rate Wireless Earbuds
\n<\/a>
\n \u2014
\n $219.99<\/p>\n

(List Price $249.00)\n <\/p>\n

\n
\n Apple iPad 11″ 128GB Wi-Fi Retina Tablet (Blue, 2025 Release)
\n<\/a>
\n \u2014
\n $279.00<\/p>\n

(List Price $349.00)\n <\/p>\n

\n
\n Amazon Fire HD 10 32GB Tablet (2023 Release, Black)
\n<\/a>
\n \u2014
\n $69.99<\/p>\n

(List Price $139.99)\n <\/p>\n

\n
\n Sony WH-1000XM5 Wireless Noise Canceling Headphones
\n<\/a>
\n \u2014
\n $248.00<\/p>\n

(List Price $399.99)\n <\/p>\n

\n
\n Blink Outdoor 4 1080p Security Camera (5-Pack)
\n<\/a>
\n \u2014
\n $159.99<\/p>\n

(List Price $399.99)\n <\/p>\n

\n
\n Fire TV Stick 4K Streaming Device With Remote (2023 Model)
\n<\/a>
\n \u2014
\n $24.99<\/p>\n

(List Price $49.99)\n <\/p>\n

\n
\n Bose Quiet Comfort Ultra Wireless Noise Cancelling Headphones
\n<\/a>
\n \u2014
\n $298.00<\/p>\n

(List Price $429.00)\n <\/p>\n

\n
\n Shark AV2511AE AI Robot Vacuum With XL Self-Empty Base
\n<\/a>
\n \u2014
\n $249.99<\/p>\n

(List Price $599.00)\n <\/p>\n

\n
\n Apple Watch Series 11 (GPS, 42mm, S\/M Black Sport Band)
\n<\/a>
\n \u2014
\n $349.00<\/p>\n

(List Price $399.00)\n <\/p>\n

\n
\n WD Elements 14TB Desktop External USB 3.0 Hard Drive
\n<\/a>
\n \u2014
\n $169.99<\/p>\n

(List Price $279.99)\n <\/p>\n

\n Products available for purchase through affiliate links. If you buy something through links on our site, Mashable may earn an affiliate commission.\n <\/p>\n

In a statement given on Friday, Tea said it was addressing the first database breach and that no current user data had been exposed. In a follow-up statement to 404Media, Tea wrote: “We are continuing to work expeditiously to contain the incident and have launched a full investigation with assistance from external cybersecurity firms. We have also reached out to law enforcement and are assisting in their investigation. Since our investigation is in its early stages, we do not have more information we can share at this time.”<\/p>\n

The Tea app recently shot up in popularity, following viral controversy over its existence as an alleged “man-shaming” app. Prior to the breach, some users were concerned with the app’s storing of personal information (including that of both users themselves and the men they discuss), while others supported the need for women-only spaces online to share stories and protect each other’s safety. <\/p>\n


\n This Tweet is currently unavailable. It might be loading or has been removed.
\n <\/a><\/p>\n


\n This Tweet is currently unavailable. It might be loading or has been removed.
\n <\/a><\/p>\n

But while debate about the app’s efficacy flared, online users took advantage of the app’s vulnerable security system to target its female user base: Shortly after reporting on the first breach, hackers seized geolocation information stored in the legacy database to explicitly doxx users \u2014 who are promised anonymity upon making an account in order to more comfortably share warnings about encounters with men \u2014 and have since created a nationwide map<\/a> with the locations of Tea users. Others pulled personal images from the database in order to ridicule their appearance in public forums, while a few created copycat apps designed for men to discuss intimate details of women’s bodies. <\/p>\n