Massive Data Breach Revealed: 4chan User Finds Tea’s Collected Personal Data Publicly Accessible

Recently, concerns have arisen surrounding the Tea app, designed exclusively for women. This platform requires users to verify their feminine identity by submitting personal identification. However, it has come to light that a collection of this sensitive data was inadvertently uploaded to a public server, raising significant privacy and security issues.

While this incident qualifies as a “data breach, ” the information was not initially secure, as it was accessible to anyone who sought it out. A group of users from 4chan disclosed that personal information from all women who registered on the app was found stored in a publicly available storage bucket, which notably lacked any password protection.

The exposure of this personal data means that users’ information is now at risk. Many individuals utilized automated scripts to scrape this data before the vulnerability could be adequately addressed, indicating a severe lapse in data protection protocols.

The Tea App’s Data Exposure Explained

Tea Dating Advice was created to empower women seeking safer dating experiences on platforms such as Hinge, Bumble, and Tinder. The app provides a community where women can share advice and experiences, conduct background checks, and obtain counsel on potential matches to navigate online dating securely.

Ironically, this intention to enhance safety has backfired spectacularly. To utilize the app, users must submit solid evidence of their gender, typically in the form of a driver’s license or a government-issued ID. Alarmingly, nearly 60GB of personal photos and identification documents have become publicly accessible due to the careless upload process.

Instead of safeguarding this private information, Tea’s developers mistakenly placed the collected user data on a public cloud server, which has now been indexed by users on platforms like 4chan. This discovery has sparked widespread concern as links to the public storage and a comprehensive list of the exposed data were disseminated, prompting individuals to search for their information online.

As it stands, Tea has not yet issued a formal statement addressing the breach or outlining the steps being taken to resolve the issue and protect its users.

Source&Images