The dating safety app Tea suffered a significant data breach, exposing over 72,000 verification selfies, IDs, and private messages after hackers accessed its unsecured database. Despite Tea's claims of ensuring user safety by requiring ID and selfies for verification, the leaked data included sensitive images and messages, with some information from as recent as 2024 and 2025. The breach was attributed to a lack of security measures, which possibly stemmed from 'vibe coding,' where developers rely on generative AI without adequate security reviews. The hacker noted that Tea's Firebase bucket lacked authentication, making the data publicly accessible. Users of the app, which had recently gained 4 million downloads, are now at risk as their personal information is circulating online. Experts warn that while AI tools can aid in development, significant security flaws can arise from overreliance on these technologies, emphasizing the importance of traditional coding practices.

Source 🔗