In July and August 2025, the Tea app, a U.S.-based platform that allows women to anonymously share dating experiences, suffered a significant data breach. Hackers exploited a vulnerability in the app’s backend, exposing sensitive information from over 70,000 users.
The leaked data included personally identifiable information (PII) such as usernames, email addresses, private messages, and mailing addresses. Following the breach, misogynistic online groups used the exposed data to create and publish maps showing the locations of users. These maps, hosted on platforms like Google Maps, displayed large numbers of pinned locations across the United States, putting users at risk of stalking and harassment.
The Tea app has stated that it is working to identify affected users and offer identity theft protection services. This incident highlights the serious consequences when personal information is exposed. The combination of PII and geolocation data creates a heightened safety risk for users, demonstrating the critical need for strong security measures on platforms handling sensitive personal content.
This breach is a clear reminder that not every app is safe for storing or sharing sensitive identity information, such as driver’s licences, passports, or other personal documents. Even platforms that seem private or secure can be vulnerable to breaches or misuse.
Users should exercise extreme caution and only share critical personal information with trusted, verified services. Protecting your identity online is essential – convenience should never outweigh security.
