Tea's investigation of the incident found that app users' direct messages had been breached, along with some of their photos.