The Tea app, a platform for women to rate and review dating experiences, recently went viral on the US App Store but suffered a severe data breach. Due to insecure Firebase storage and poor application security hygiene, over 72,000 private images including ID cards and selfies were exposed, with no access control or rate limiting in place. Metadata extraction further revealed user GPS locations, and sensitive credentials were leaked through hardcoded secrets in both mobile and web applications. Jamieson O’Reilly, an offensive security consultant, independently validated these issues through static analysis and decompilation, identifying hardcoded Mapbox server keys and exposed bearer tokens in production ...