4chan Allegedly Linked to Tea App Hack That Leaked 72,000 Selfies Including ID Documents

In a shocking breach of user trust, over 72,000 images from the woman-only dating app Tea have been leaked online—many of them sensitive verification selfies and even government-issued IDs. The breach, allegedly linked to a 4chan user, has raised urgent concerns about digital privacy, particularly in women-focused platforms.

4chan and the Tea App Hack — What Happened?

The leak began surfacing after a user on 4chan claimed access to internal files from the Tea app. The company, founded by Sean Cook, confirmed that an unauthorized intrusion occurred within its legacy data systems, resulting in a major data breach. Preliminary investigations revealed that 13,000 of the leaked images were verification selfies, some of which included visible ID documents like driver’s licenses. The remaining 59,000 images were user-uploaded photos from profiles visible within the app.

According to Tea’s official statement, the exposed files were stored in outdated systems no longer integrated with the app’s current infrastructure. The company stressed that no recent user data was affected. The leak became public around July 25, 2025, prompting Tea to notify users via its in-app support chat and initiate a comprehensive security review.

Impact on Women’s Safety and Trust in Verification Apps

Tea markets itself as a safer alternative in the dating world by requiring identity verification to prevent catfishing and fake profiles. However, the breach has directly undermined that promise. With selfies, IDs, and personal information now circulating online, users are left feeling exposed and vulnerable.

This breach is especially alarming given Tea’s recent rise to the #1 spot on the Apple App Store in the U.S. The leak not only threatens the privacy of its user base but also puts pressure on other dating platforms to reassess their data security strategies.

4chan’s Controversial Role in Data Leaks

4chan, an anonymous message board often associated with internet subcultures, has a long history of data exposure controversies. From celebrity leaks to doxxing incidents, its forums have been repeatedly linked to online security violations. Earlier in April 2025, 4chan itself was reportedly hacked, exposing internal data and moderation chats.

While the individual responsible for leaking the Tea data remains unidentified, the post’s appearance on 4chan has escalated concerns among cybersecurity experts about the site’s role in disseminating sensitive information.

How Users Can Protect Themselves

If you used the Tea app and uploaded identification for verification, consider taking these steps:

• Monitor your personal accounts for unusual activity.

• Freeze your credit with major bureaus to prevent identity fraud.

• Report the breach to your local data protection authority or consumer protection agency.

• Replace your driver’s license or ID if it was part of the uploaded documents.

• Use identity protection services and set up alerts for suspicious online activity.

What Tea Is Doing to Respond

Tea has initiated a full internal probe and involved cybersecurity experts to contain the breach. According to its statement, no current system used by the app was compromised. However, Tea acknowledges the oversight in how legacy data was stored and pledged stronger encryption and deletion protocols moving forward.

The company has notified all affected users and is expected to cooperate with relevant legal and regulatory authorities during the ongoing investigation.

Could This Lead to Legal Repercussions?

Given that some leaked images include government-issued IDs, Tea could face regulatory investigations in jurisdictions with strong data privacy laws. This includes potential scrutiny under:

• FTC regulations in the United States,

• GDPR in the European Union (if EU users are involved),

• India’s Digital Personal Data Protection Act, if Indian users were affected.

Legal consequences would depend on the extent of the breach and how responsibly the company handled data retention and incident response.

You Must Know (FAQ Section)

1. Was 4chan directly responsible for the Tea app hack?
No, but the leak was posted by a user on 4chan, which is why the platform is being associated with the incident. Tea confirmed unauthorized access came from outside their systems.

2. What kind of data was leaked from the Tea app?
The leak includes 13,000 verification selfies and 59,000 user profile images. Some verification selfies showed government-issued IDs like driver’s licenses.

3. Is Tea responsible for storing such sensitive user data?
Tea used the data for user verification, but it was reportedly kept in outdated “legacy” systems that lacked modern encryption or deletion safeguards.

4. How can I protect myself if I used the Tea app?
Immediately check if your images were compromised, freeze your credit, change passwords, and monitor for identity theft signs.

5. Has 4chan been involved in similar leaks before?
Yes, 4chan has a history of being a platform where hackers have shared leaked content, including celebrity photos and personal information.

6. Could Tea face legal consequences?
Potentially, yes. Regulators could investigate under various national data privacy laws if negligence or mishandling is found.