The Tea app data breach has spiraled into online harassment, with leaked user photos reportedly used in a rating site and an unverified map. Experts say this wasn’t a hack—but a major security failure.

A spokesperson for Tea confirmed the hack to ABC News Friday afternoon, noting it involved a database that stored around 13,000 images of selfies and photo identification submitted as users sought to verify their accounts, as well as nearly 60,000 images viewable for all app users.