TeaOnHer Data Breach Exposes Private Photos, IDs, and Messages

The TeaOnHer data breach has exposed highly sensitive user information from the controversial dating and review app marketed toward men. Security researchers discovered that the app’s insecure API made it possible for anyone to access user selfies, scanned driver’s licenses, email addresses, and private messages without authorization. The vulnerability, which remained open for days, has sparked urgent privacy concerns as the app’s popularity surged.

This incident closely mirrors the earlier breach of the female-focused Tea app, which compromised over 72,000 images, including government-issued IDs, and more than 1.1 million private messages. That case led to multiple class-action lawsuits and forced Tea to disable its direct messaging system. Many experts now predict that the TeaOnHer data breach could result in similar legal fallout, further damaging the brand’s already fragile reputation.

Privacy advocates warn that the TeaOnHer data breach puts users at extreme risk of identity theft, harassment, doxxing, and reputational harm. By combining personally identifying documents with intimate conversations, attackers have access to a uniquely dangerous set of information. Cybersecurity analysts have criticized both Tea and TeaOnHer for neglecting basic safeguards, including secure authentication and proper encryption of sensitive data.

The growing controversy surrounding the TeaOnHer data breach has renewed calls for stronger oversight of dating and review platforms. Regulators, privacy groups, and app store operators are being urged to enforce stricter vetting standards and require robust security measures before allowing such apps to operate. While TeaOnHer’s developers have taken some features offline to investigate, experts caution that for many affected users, the damage from this breach may already be permanent.

---