The Tea app data breach has spiraled into online harassment, with leaked user photos reportedly used in a rating site and an unverified map. Experts say this wasn’t a hack—but a major security failure.

A spokesperson for Tea confirmed the hack to ABC News Friday afternoon, noting it involved a database that stored around 13,000 images of selfies and photo identification submitted as users sought to verify their accounts, as well as nearly 60,000 images viewable for all app users.

A vulnerability in the Tea app has been discovered that allowed users to download the personal information of everyone on the app.

Tea Dating Advice app rocketed to the top of Apple’s app store this week. It’s used for women to report issues with men. The point is helping keep women safe — but what about the legal issues around privacy and defamation?