The dating app Tea, aimed at creating a safe space for women, suffered a significant data breach exposing over 72,000 private images, including selfies and government IDs, due to an unsecured database. Hackers discovered that the app's backend lacked essential security measures, resulting in sensitive user data being rapidly disseminated online. The compromised information included verification selfies and private messages from users, with data that contradicted the app’s claims that only older files were exposed. The breach raised concerns about the app's use of 'vibe coding', a practice where applications are rapidly developed with AI assistance, often leading to security vulnerabilities. Experts point out that reliance on such methods can leave systems poorly protected, highlighting a trend in startup environments that could pose significant risks to user privacy. Users of Tea are advised to monitor their identities, as some personal information has already appeared on searchable platforms.

Source 🔗