Tea, an app for women to safely talk about men they date, has been breached, user IDs exposed

Tea, an app designed to let women safely discuss men they date has been breached, with thousands of selfies and photo IDs of users exposed, the company confirmed on Friday.

Tea said that about 72,000 images were leaked online, including 13,000 images of selfies or selfies featuring a photo identification that users submitted during account verification. Another 59,000 images publicly viewable in the app from posts, comments and direct messages were also accessed without authorization, according to a Tea spokesperson.

No email addresses or phone numbers were accessed, the company said, and the breach only affects users who signed up before February 2024.

“Tea has engaged third-party cybersecurity experts and are working around the clock to secure its systems,” the company said. “At this time, there is no evidence to suggest that additional user data was affected. Protecting tea users’ privacy and data is their highest priority.”

Tea presents itself as a safe way for women to anonymously vet men they might connect with on dating apps such as Tinder or Bumble — ensuring that your date is “safe, not a catfish, and not in a relationship.”

“Tea is a must-have app, helping women avoid red flags before the first date with dating advice, and showing them who’s really behind the profile of the person they’re dating,” reads Tea's app store description.

404 Media, which earlier reported the breach, said it was 4Chan users who discovered an exposed database that “allowed anyone to access the material" from Tea.

“While reporting this story, a URL the 4chan user posted included a voluminous list of specific attachments associated with the Tea app. 404 Media saw this list of files. In the last hour or so, that page was locked down, and now returns a “Permission denied” error,” 404 Media reported Friday.

Tea said in an Instagram post this week that it has reached 4 million users.

FILE - A person uses a smartphone in Chicago, Sept. 16, 2017. (AP Photo, File)

JACKSON, Miss. (AP) — A man handed an illegal prison sentence years longer than the maximum penalty for his crime has been granted clemency by Mississippi's governor, weeks after the man's brother received clemency in a similar case.

Gov. Tate Reeves announced Wednesday that he was granting clemency to Maurice Taylor. The man's brother, Marcus Taylor, received clemency earlier this month from the governor for another illegal sentence.

In February 2015, both brothers accepted plea bargains and pled guilty to conspiracy to sell a Schedule III substance.

At the time, the maximum penalty for conspiracy to sell a Schedule III substance was five years. Yet Maurice Taylor was sentenced to 20 years in prison with five years suspended, and Marcus Taylor to 15 years.

“Like his brother, Maurice Taylor received a sentence more than three times longer than allowed under Mississippi law,” Reeves wrote in his announcement. “When justice is denied to even one Mississippian, it is denied to us all.”

In May, the Mississippi Court of Appeals had ruled that Marcus Taylor’s sentence was illegal, but did not commute his sentence because Taylor had missed the deadline to apply for post-conviction relief. After rehearing that case in November, the court reversed course and ordered his release.

In Wednesday's order, Reeves wrote that Maurice Taylor's post-conviction counsel contacted his office for the first time a few weeks ago, providing legal documents in his case. Maurice Taylor must be released within five days, according to Reeves’ order.

The Associated Press was not immediately able to identify and contact Maurice Taylor's post-conviction counsel.

The brothers are the only people to receive clemency from Reeves.

FILE - Republican Gov. Tate Reeves responds to a reporter's question during a news conference Tuesday, Nov. 1, 2022, in Jackson, Miss. (AP Photo/Rogelio V. Solis, File)