Breaches & lessons

Real incidents in AI-built and startup apps, what went wrong, and what it would have taken to prevent it.

Topics:#vibe-coding #row-level-security #supabase #api-keys #data-breach #lovable #access-control #ai-generated-code #bolt #cursor #cve #file-storage #firebase #gdpr

1 article in Breaches tagged #gdpr

Clear filters

Breaches23 Sept 2026

The Tea app leak: 72,000 images, including 13,000 IDs, from a storage folder anyone could open

Tea hit the top of the App Store the same week its users' ID photos were posted on 4chan. The images sat in a cloud storage folder with no lock on it. Here's how that happens, and how to check your own storage today.

3 min read

Launching soon?

The free pre-launch checklist has the twenty checks we would run first, in the order we would run them. No email, no account.

Open the checklist RSS

Breaches & lessons

Results

The Tea app leak: 72,000 images, including 13,000 IDs, from a storage folder anyone could open

Launching soon?