Tea app data theft scandal worsens as stolen IDs leaked to cybercriminal forum

Recorded Future reports that the Tea dating/safety app suffered an unauthorized access to a legacy data storage system that exposed roughly 72,000 images (including ~13,000 verification selfies and state IDs). The data — reportedly stored in a publicly accessible Firebase bucket — was posted and circulated on 4chan and cybercriminal forums, enabling doxxing, location mapping of users (including some linked to U.S. Army bases), and wider dissemination of highly sensitive personally identifiable information.