Dating App Doxes its Own Users
Source: YouTube · The PrimeTime · published Jul 31, 2025 · 16:29
The video exposes two major security breaches of the T app, a women's gossip platform designed for sharing information about men, which resulted in massive privacy violations 0:00-0:32.
Key Takeaways:
• The first breach compromised a legacy data storage system, exposing approximately 72,000 images including 13,000 selfies and photo IDs submitted for verification 3:00-4:57
• Despite T's claims that no email addresses or phone numbers were leaked, phone numbers and personal information were actually exposed in the second breach 10:48-12:04
• A critical vulnerability allowed any user to access the database with their own API key, exposing over 1.1 million messages from early 2023 to just last week 13:37-14:49
• Leaked data, including IDs and selfies, was posted on 4chan and used to create a "face mash" rating site where users could compare and rank women's appearances 5:55-6:58, 15:07-16:06
The video highlights the irony of an app designed to expose others ultimately exposing its own users through gross security negligence 8:08-10:02.
Sources:
- 0:00-0:32 Introduction to T app as a women's gossip platform
- 3:00-4:57 T's official security update about the first breach
- 5:55-6:58 Information about data posted to 4chan
- 8:08-10:02 Details of the second security breach
- 10:48-12:04 Contradiction in T's statements about phone numbers
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
All right, so we're going to start off with this T hack by first reading their security incident. We are going to look at the uh kind of the what some of the report and then there was a second breach. So for those that don't know, the T app is a women's only kind of gossip app. Maybe that's like the best way to put it where they can upload men say what they've done. There's no verification to any of the information they upload. They just simply get to upload whatever and say whatever about people. So it's more of a doxing app, right? I think that's what people have generally said it is is that it's just a doxing app where you can talk about people. All right, so let's first let's just do a quick what what did T say happened? So let's start here because I think this is probably the best pla…