Private messages of over 1.1 million women were laid bare in a massive security breach, forcing the women-only Tea app to shut down its direct messaging feature in a desperate bid to contain the fallout. This dating safety platform, which soared to the top of the Apple App Store in July 2025, now faces a firestorm of criticism as users question whether their personal data is safe.
Just days before this latest crisis, the Tea app suffered its first blow when hackers uncovered 72,000 images, including 13,000 selfies and photo IDs from users who joined before February 2024. The leak, first spotted by anonymous 4chan users, came from an unsecured Google Firebase database. The second breach, far more damaging, exposed private conversations from February 2023 to July 2025, covering sensitive topics like infidelity, abortion, phone numbers, and meetup locations. With user trust crumbling, Tea disabled direct messaging to halt further leaks, but the damage was done.
After the initial breach, Tea App scrambled to respond. The company pulled the affected system offline, brought in cybersecurity experts, and rolled out new security measures. Through Instagram and in-app alerts, they assured users that no email addresses or phone numbers were compromised. Yet, the second breach exposed glaring gaps in these fixes, leaving many to wonder if Tea’s rapid rise outpaced its ability to protect its 4 million users.
The breaches sparked a heated debate about Tea’s development practices, with some pointing fingers at “vibe coding.” This term describes the use of AI tools, like ChatGPT, to churn out code quickly, often skipping rigorous security checks. Critics argue this led to Tea’s vulnerable database, a claim that gained traction after hackers revealed the app’s weaknesses. However, some tech experts push back, insisting the errors were standard coding oversights, not AI-driven mistakes. This clash has fueled broader scrutiny of how startups prioritize speed over safety.
Behind Tea is Sean Cook, a San Francisco software engineer who founded the app in 2023 after his mother faced troubling online dating experiences, including being catfished. Cook, a former Salesforce and Shutterfly employee, built Tea to empower women to share anonymous dating advice and vet potential partners. Its mission struck a chord, drawing millions of users and a waiting list of nearly 900,000 by July 2025.
But Tea’s problems extend far beyond the technical. Its system, in which women can post anonymous reviews of men by name and photograph, has generated controversy. While advocates see it as a vital tool for women’s protection, critics call it a tool for public shaming and challenge it on defamation grounds. Legal experts observe that Tea is covered by Section 230 of the Communications Decency Act, but the users who post false claims can be sued. More seriously, information leaked from the hacks has been employed maliciously. A now-defunct website, “TeaSpill,” contained stolen selfies ranking women, and a map made from metadata and unsubstantiated elevated concern over harassment.
In mid-July 2025, Tea topped the Apple App Store’s free app chart, outpacing heavyweights like ChatGPT with a 525% download surge from July 17-23. But as of July 30, 2025, its ranking is shaky amid the fallout from these breaches. While still available on the App Store, Tea’s once-meteoric rise is now clouded by distrust.
The road ahead for Tea is uncertain. With direct messaging disabled and its reputation battered, the app must prove it can safeguard user data. For now, the tech world and its millions of users are watching, waiting to see if Tea can rebuild trust or if its promise of safety will unravel further.
