Tea App Second Breach Exposed Over Million Private Messages

Dating safety app Tea confirmed a second data breach that exposed over 1.1 million private messages, weeks after revealing 72,000 verification images and selfies. The fallout highlights persistent gaps in data protection for user-focused platforms.

Breach Details

Security researcher Kasra Rahjerdi discovered logs of messages exchanged from early 2023 through July 2025. Exposed content included phone numbers, discussions about abortions, and conversations about infidelity. The initial breach affected users who signed up before February 2024, but this new finding spans a broader timeframe.

Impact on User Privacy

The leak on 4chan allowed malicious actors to access intimate details shared in confidence. For a platform built on community trust and transparency, the reputational damage could be immense. Users may rethink sharing sensitive information unless robust safeguards are in place.

Key Takeaways for Developers

• Conduct continuous penetration tests to spot vulnerabilities before attackers do.
• Implement end-to-end encryption for messages and user-uploaded assets.
• Set up real-time monitoring and anomaly detection across systems.
• Enforce strict data retention policies, purging old records regularly.

QuarkyByte's Approach

At QuarkyByte, we blend deep security analytics with custom threat modeling to help platforms like Tea plug gaps and fortify defenses. By simulating real-world attack scenarios and tailoring rapid response plans, we transform precarious vulnerabilities into resilient security postures.